Function at 0x180093770
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xa0
mov rax, qword [0x180352040]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov rsi, rcx
xor edi, edi
mov dword [rbp - 0x39], edi
mov edx, dword [0x18035313c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x18035b3ac], edx
jle 0x180093830
lea rcx, [0x18035b3ac]
call fcn.1800ae288
cmp dword [0x18035b3ac], 0xffffffff
jne 0x180093830
mov eax, dword [rsi + 0x2c]
test eax, eax
je 0x1800937fe
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss xmm1, dword [0x18033ff84]
divss xmm1, xmm0
cvttss2si eax, xmm1
jmp 0x180093800
xor eax, eax
movsxd rbx, eax
mov qword [0x18035c738], rdi
lea rcx, [rbp - 0x39]
call fcn.18009abd0
mov rdx, qword [rax]
mov qword [0x18035c738], rdx
mov qword [0x18035c740], rbx
lea rcx, [0x18035b3ac]
call fcn.1800ae21c
mov ebx, 1
cmp byte [rsi + 0x28], dil
je 0x180093872
cmp byte [0x1803570d8], dil
jne 0x180093872
mov ecx, 2
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x180093872
lea rdx, [rbp - 0x31]
mov rcx, qword [0x180357760]
call fcn.180069a40
mov edi, ebx
cmp qword [rax + 8], 0
jne 0x180093872
xor r14b, r14b
jmp 0x180093876
movzx r14d, bl
test bl, dil
je 0x1800938a9
and edi, 0xfffffffe
cmp byte [rbp - 0x21], 0
je 0x1800938a9
cmp qword [0x1803570d0], 0
je 0x1800938a9
mov rdx, qword [rbp - 0x29]
test rdx, rdx
je 0x1800938a9
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
call r8
nop
test r14b, r14b
jne 0x180093b73
lea rcx, [rbp - 0x39]
call fcn.18009abd0
mov rcx, qword [rbp - 0x39]
mov rdx, rcx
sub rdx, qword [0x18035c738]
movabs rax, 0x431bde82d7b634db
imul rdx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, qword [0x18035c740]
je 0x1800938ff
mov r8d, 0xff
cmovl ebx, r8d
test bl, bl
js 0x180093b73
mov qword [0x18035c738], rcx
cmp byte [rsi + 0x29], 0
je 0x180093a01
lea rdx, [rbp + 0x1f]
mov rcx, qword [0x180357760]
call fcn.180069950
nop
or edi, 2
mov dword [rbp - 0x39], edi
lea rdx, [rbp - 0x31]
mov rcx, rax
call fcn.18006ca80
mov r14, rax
or edi, 4
mov dword [rbp - 0x39], edi
mov rsi, qword [0x1803570d0]
xorps xmm0, xmm0
movups xmmword [rbp - 1], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf], xmm1
mov r8d, 5
lea rdx, str.BLOCK
lea rcx, [rbp - 1]
call fcn.180005930
nop
or edi, 8
mov dword [rbp - 0x39], edi
lea rdx, [rbp - 1]
lea rcx, [0x180357438]
call fcn.180073150
mov rbx, rax
mov rdx, rsi
lea rcx, [0x180357438]
call fcn.180072f70
mov rcx, qword [rsi]
mov r9, qword [rcx + 0x488]
mov r8, rbx
mov rdx, rax
mov rcx, rsi
call r9
mov rbx, rax
mov qword [rbp - 0x19], rsi
xor r15b, r15b
mov byte [rbp - 9], r15b
test rax, rax
je 0x1800939c3
mov qword [rbp - 0x11], rax
mov r8, rax
jmp 0x1800939cc
xor ebx, ebx
mov qword [rbp - 0x11], rbx
xor r8d, r8d
or edi, 0x20
or edi, 0x10
mov dword [rbp - 0x39], edi
mov rdx, qword [r14 + 8]
cmp rdx, r8
je 0x180093a0e
test rdx, rdx
je 0x1800939fc
test r8, r8
je 0x1800939fc
mov rcx, qword [r14]
mov rax, qword [rcx]
mov r9, qword [rax + 0xc0]
call r9
cmp al, 1
je 0x180093a0e
mov r14b, 1
jmp 0x180093a11
movzx r15d, byte [rbp - 9]
mov rbx, qword [rbp - 0x11]
mov rsi, qword [rbp - 0x19]
xor r14b, r14b
test dil, 0x10
je 0x180093a45
and edi, 0xffffffef
mov dword [rbp - 0x39], edi
test r15b, r15b
je 0x180093a45
cmp qword [0x1803570d0], 0
je 0x180093a45
test rbx, rbx
je 0x180093a45
mov rax, qword [rsi]
mov r8, qword [rax + 0xb0]
mov rdx, rbx
mov rcx, rsi
call r8
nop
test dil, 8
je 0x180093a9d
and edi, 0xfffffff7
mov rdx, qword [rbp + 0x17]
cmp rdx, 0xf
jbe 0x180093a8c
inc rdx
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180093a87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180093a87
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ae784
movdqa xmm0, xmmword [0x180340040]
movdqu xmmword [rbp + 0xf], xmm0
mov byte [rbp - 1], 0
test dil, 4
je 0x180093adb
and edi, 0xfffffffb
mov dword [rbp - 0x39], edi
cmp byte [rbp - 0x21], 0
je 0x180093adb
cmp qword [0x1803570d0], 0
je 0x180093adb
mov rdx, qword [rbp - 0x29]
test rdx, rdx
je 0x180093adb
mov rcx, qword [rbp - 0x31]
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
call r8
mov qword [rbp - 0x29], 0
test dil, 2
je 0x180093b0c
cmp byte [rbp + 0x2f], 0
je 0x180093b0c
cmp qword [0x1803570d0], 0
je 0x180093b0c
mov rdx, qword [rbp + 0x27]
test rdx, rdx
je 0x180093b0c
mov rcx, qword [rbp + 0x1f]
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
call r8
nop
test r14b, r14b
jne 0x180093b73
mov qword [rbp + 0x37], 0
lea rcx, [rbp + 0x37]
call qword [sym.imp.USER32.dll_GetCursorPos]
movzx r9d, word [rbp + 0x3b]
shl r9d, 0x10
movzx eax, word [rbp + 0x37]
or r9, rax
mov edx, 0x204
mov r8d, 2
mov rcx, qword [0x1803570e0]
call qword [sym.imp.USER32.dll_PostMessageA]
movzx r9d, word [rbp + 0x3b]
shl r9d, 0x10
movzx eax, word [rbp + 0x37]
or r9, rax
mov edx, 0x205
mov r8d, 2
mov rcx, qword [0x1803570e0]
call qword [sym.imp.USER32.dll_PostMessageA]
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1800ae1c0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret