Function at 0x18005e850
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
movsxd rdi, ecx
mov ecx, 0x41
movaps xmmword [rsp + 0x70], xmm6
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor ebp, ebp
lea r13, [0x180332510]
movabs r14, 0x50fac3a3e030a6e1
movabs r15, 0x9a9112a0fe9a4713
movabs r12, 0x42a8ec77d5150cbe
xorps xmm6, xmm6
test ax, ax
je 0x18005e9ad
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], edi
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r14
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], r15
mov ecx, dword [rax]
mov dword [rsp + 0xb8], ecx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x1802bdd28], rbp
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
mov esi, dword [rax]
mov ecx, esi
call fcn.1800b2ef0
mov rbx, rdi
cmp byte [rdi + r13], bpl
je 0x18005e94e
movss xmm0, dword [0x18026c0b0]
jmp 0x18005e951
xorps xmm0, xmm0
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], esi
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0xb8], rbp
movss dword [rsp + 0xb8], xmm0
mov qword [0x1802bdd20], rax
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd28], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r12
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
jmp 0x18005e9b0
mov rbx, rdi
mov ecx, 0x44
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18005eab7
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], edi
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r14
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], r15
mov ecx, dword [rax]
mov dword [rsp + 0xb8], ecx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x1802bdd28], rbp
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
mov esi, dword [rax]
mov ecx, esi
call fcn.1800b2ef0
cmp byte [rbx + r13], bpl
je 0x18005ea5a
movss xmm0, dword [0x18026e2a4]
jmp 0x18005ea5d
xorps xmm0, xmm0
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], esi
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0xb8], rbp
movss dword [rsp + 0xb8], xmm0
mov qword [0x1802bdd20], rax
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd28], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r12
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movabs rsi, 0xb69317bf5e782347
movabs r13, 0xd5037ba82e12416f
movabs r12, 0x1bf60a500e28887
test ax, ax
je 0x18005ed57
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], edi
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r14
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], r15
mov ecx, dword [rax]
mov dword [rsp + 0xb8], ecx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x1802bdd28], rbp
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], rsi
mov ebx, dword [rax]
mov dword [rsp + 0xb8], ebx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], ebx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r12
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
cmp dword [rax], ebp
je 0x18005ed57
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], edi
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r14
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], r15
mov ecx, dword [rax]
mov dword [rsp + 0xb8], ecx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x1802bdd28], rbp
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
mov dword [rsp + 0x60], 1
xorps xmm3, xmm3
mov dword [rsp + 0x58], 1
xorps xmm2, xmm2
mov dword [rsp + 0x50], 1
mov edx, 1
mov ebx, dword [rax]
mov ecx, ebx
mov dword [rsp + 0x48], ebp
mov dword [rsp + 0x40], 1
movss dword [rsp + 0x38], xmm6
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm6
call fcn.1800b0430
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], ebx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r13
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
movss xmm0, dword [0x18026c678]
movabs rax, 0xab54a438726d25d5
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], rax
mov dword [rsp + 0xb8], ebx
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0xb8], rbp
movss dword [rsp + 0xb8], xmm0
mov qword [0x1802bdd20], rax
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd28], rax
mov dword [0x1802bdc58], ebp
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18005efd9
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], edi
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r14
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], r15
mov ecx, dword [rax]
mov dword [rsp + 0xb8], ecx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x1802bdd28], rbp
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], rsi
mov ebx, dword [rax]
mov dword [rsp + 0xb8], ebx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], ebx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r12
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
cmp dword [rax], ebp
je 0x18005efd9
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], edi
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r14
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], r15
mov ecx, dword [rax]
mov dword [rsp + 0xb8], ecx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x1802bdd28], rbp
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
mov dword [rsp + 0x60], 1
xorps xmm3, xmm3
mov dword [rsp + 0x58], 1
xorps xmm2, xmm2
mov dword [rsp + 0x50], 1
mov edx, 1
mov ebx, dword [rax]
mov ecx, ebx
mov dword [rsp + 0x48], ebp
mov dword [rsp + 0x40], 1
movss dword [rsp + 0x38], xmm6
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm6
call fcn.1800b0430
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], ebx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r13
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
movss xmm0, dword [0x18026e7fc]
movabs rax, 0xab54a438726d25d5
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], rax
mov dword [rsp + 0xb8], ebx
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0xb8], rbp
movss dword [rsp + 0xb8], xmm0
mov qword [0x1802bdd20], rax
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd28], rax
mov dword [0x1802bdc58], ebp
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18005f251
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], edi
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r14
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], r15
mov ecx, dword [rax]
mov dword [rsp + 0xb8], ecx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x1802bdd28], rbp
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], rsi
mov ebx, dword [rax]
mov dword [rsp + 0xb8], ebx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], ebx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r12
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
cmp dword [rax], ebp
je 0x18005f251
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], edi
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r14
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
mov qword [0x18033c890], r15
mov ecx, dword [rax]
mov dword [rsp + 0xb8], ecx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x1802bdd28], rbp
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
mov dword [rsp + 0x60], 1
xorps xmm3, xmm3
mov dword [rsp + 0x58], 1
xorps xmm2, xmm2
mov dword [rsp + 0x50], 1
mov edx, 1
mov ebx, dword [rax]
mov ecx, ebx
mov dword [rsp + 0x48], ebp
mov dword [rsp + 0x40], 1
movss dword [rsp + 0x38], xmm6
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm6
call fcn.1800b0430
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xb8], ebx
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd20], rax
mov dword [0x1802bdc58], ebp
mov qword [0x18033c890], r13
mov dword [0x1802bdc48], 1
call fcn.1800cdff0
mov qword [rsp + 0xb8], rbp
movabs rax, 0xab54a438726d25d5
mov qword [0x18033c890], rax
mov dword [rsp + 0xb8], ebx
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0xb8], rbp
mov qword [0x1802bdd20], rax
mov dword [rsp + 0xb8], ebp
mov rax, qword [rsp + 0xb8]
mov qword [0x1802bdd28], rax
mov dword [0x1802bdc58], ebp
mov dword [0x1802bdc48], 2
call fcn.1800cdff0
movaps xmm6, xmmword [rsp + 0x70]
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret