Function at 0x1800f05d0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x140
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180170038]
xor rax, rsp
mov qword [rbp + 0xe0], rax
mov rsi, r9
mov qword [rbp + 0x60], r9
mov rdi, qword [rsp + 0x190]
mov qword [rbp + 0x68], rdi
movabs rax, 0x2e1397f9957852f0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0xc21d85a6f6aa4a81
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xb024dd602df7e6b0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x51ac71579aa203a7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs r15, 0x415fe59ce30a37a3
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs r12, 0xb07ed6c198c32ee0
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs r13, 0xc054b212699983d5
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs r14, 0x51ac71579aa267c2
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x40], ymm1
mov rcx, rdi
cmp qword [rdi + 0x18], 0x10
vzeroupper
jb 0x1800f06fa
mov rcx, qword [rdi]
lea rdx, [rbp + 0x40]
mov rbx, 0xffffffffffffffff
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x1800f0710
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x40]
xor r8d, r8d
mov rdx, qword [rdi + 0x10]
call fcn.1800450e0
cmp rax, rbx
je 0x1800f074a
cmp byte [0x1801a9764], 0
je 0x1800f074a
cmp byte [0x1801a896b], 0
jne 0x1800f074a
call fcn.1800ee050
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800f0768
cmp byte [0x1801a9764], 0
je 0x1800f0768
call fcn.18009da50
movabs rax, 0x240d97f9957852f0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0xd133b995f6b15b94
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0xc054c77c0cd4edbc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqa ymmword [rbp + 0x20], ymm1
mov rcx, rdi
cmp qword [rdi + 0x18], 0x10
vzeroupper
jb 0x1800f0814
mov rcx, qword [rdi]
lea rax, [rbp + 0x20]
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1800f0820
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x20]
xor r8d, r8d
mov rdx, qword [rdi + 0x10]
call fcn.1800450e0
cmp rax, 0xffffffffffffffff
je 0x1800f0852
cmp byte [0x1801a896b], 0
je 0x1800f0852
call fcn.18009da50
cmp dword [0x180172ef0], 0x17
jl 0x1800f0939
movabs rax, 0x2d0f80f0876456eb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0xdf32a2b2f1af5781
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0xc054b2120dfce7b4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x20], ymm1
mov rcx, rdi
cmp qword [rdi + 0x18], 0x10
vzeroupper
jb 0x1800f090b
mov rcx, qword [rdi]
lea rdx, [rbp + 0x20]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x1800f0939
cmp byte [0x1801a9f08], 0
je 0x1800f0939
cmp byte [0x1801a9765], 0
jne 0x1800f0939
mov byte [0x1801a9765], 1
call fcn.1800ee050
nop
mov rcx, rsi
call fcn.180014770
nop
mov rcx, rdi
call fcn.180014770
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.18011eb40
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret