Function at 0x18000e6b0
Capabilities:
Log keystrokes via polling

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x2c], 0
mov dword [rsp + 0x34], 0
mov rcx, qword [rsp + 0x60]
call fcn.18000ed90
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jne 0x18000e76f
mov rax, qword [rsp + 0x60]
movzx eax, byte [rax + 0x10]
test eax, eax
je 0x18000e702
mov rax, qword [rsp + 0x60]
mov byte [rax + 0x10], 0
mov rax, qword [rsp + 0x60]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.18000c410
mov rax, qword [rsp + 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.180006880
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.180005940
movzx eax, al
test eax, eax
je 0x18000e76f
lea rcx, [rsp + 0x38]
call fcn.18000c500
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x68]
call fcn.180003340
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea1e
cmp dword [rsp + 0x70], 0x30
jl 0x18000e7ed
cmp dword [rsp + 0x70], 0x39
jg 0x18000e7ed
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0xff00
mov word [rsp + 0x20], ax
movsx eax, word [rsp + 0x20]
test eax, eax
jne 0x18000e7c4
mov eax, dword [rsp + 0x70]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.18000e5a0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea1e
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18000ea30
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea1e
cmp dword [rsp + 0x70], 0x41
jl 0x18000e890
cmp dword [rsp + 0x70], 0x5a
jg 0x18000e890
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0xff00
mov word [rsp + 0x24], ax
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0xff00
mov word [rsp + 0x28], ax
movsx eax, word [rsp + 0x24]
test eax, eax
jne 0x18000e841
movsx eax, word [rsp + 0x28]
test eax, eax
je 0x18000e867
lea rdx, [0x18010f88c]
mov rcx, qword [rsp + 0x68]
call fcn.1800033b0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea1e
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18000ea30
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea1e
cmp dword [rsp + 0x70], 0x60
jl 0x18000e8cc
cmp dword [rsp + 0x70], 0x69
jg 0x18000e8cc
mov eax, dword [rsp + 0x70]
sub eax, 0x30
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.18000e5a0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea1e
cmp dword [rsp + 0x70], 0x6a
jl 0x18000e912
cmp dword [rsp + 0x70], 0x6f
jg 0x18000e912
mov eax, dword [rsp + 0x70]
sub eax, 0x6a
cdqe
lea rcx, str.__._
movzx edx, byte [rcx + rax]
mov rcx, qword [rsp + 0x68]
call fcn.18000e5a0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea1e
cmp dword [rsp + 0x70], 0x70
jl 0x18000e958
cmp dword [rsp + 0x70], 0x87
jg 0x18000e958
mov eax, dword [rsp + 0x70]
sub eax, 0x6f
mov r8d, eax
lea rdx, [0x1801115a8]
mov rcx, qword [rsp + 0x68]
call fcn.180010a00
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea1e
cmp dword [rsp + 0x70], 0xba
jl 0x18000e997
cmp dword [rsp + 0x70], 0xc0
jg 0x18000e997
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18000ea30
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea1e
cmp dword [rsp + 0x70], 0xdb
jl 0x18000e9d3
cmp dword [rsp + 0x70], 0xdf
jg 0x18000e9d3
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18000ea30
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea1e
cmp dword [rsp + 0x70], 0x20
jne 0x18000e9fd
lea rdx, [0x18010f914]
mov rcx, qword [rsp + 0x68]
call fcn.1800033b0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea1e
lea rdx, [0x18010f93c]
mov rcx, qword [rsp + 0x68]
call fcn.1800033b0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
add rsp, 0x58
ret