Function at 0x18009b010
Capabilities:
Log keystrokes via polling

Disassembly:
push rdi
sub rsp, 0x70
test cl, cl
mov rcx, qword [0x180109038]
je 0x18009b7af
call fcn.18000c530
mov rcx, qword [0x180109038]
movabs rdi, 0xd80958fc74e988a6
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
mov rcx, qword [0x180109038]
test eax, eax
je 0x18009b771
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x90], rsi
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm7
movaps xmmword [rsp + 0x40], xmm8
movaps xmmword [rsp + 0x30], xmm9
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
xor r8d, r8d
mov edx, eax
movabs rcx, 0x89f149b6131e57da
call fcn.18004ae20
mov rcx, qword [0x180109038]
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
mov rcx, qword [0x180109038]
mov ebx, eax
call fcn.18000c530
mov rax, qword [0x180109038]
xor esi, esi
mov qword [rsp + 0x88], rsi
mov dword [rsp + 0x88], ebx
mov rcx, qword [rsp + 0x88]
mov edx, dword [rax + 8]
mov qword [rax + rdx*8 + 0x130], rcx
movabs rdx, 0xd45dc2893621e1fe
inc dword [rax + 8]
mov rcx, qword [0x180109038]
call fcn.18000c5b0
mov rcx, qword [0x180109038]
mov rax, qword [rcx]
movss xmm0, dword [rax]
movss dword [0x18019d660], xmm0
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
mov rcx, qword [0x180109038]
mov ebx, eax
call fcn.18000c530
mov rax, qword [0x180109038]
mov qword [rsp + 0x88], rsi
mov dword [rsp + 0x88], ebx
mov rcx, qword [rsp + 0x88]
mov edx, dword [rax + 8]
mov qword [rax + rdx*8 + 0x130], rcx
movabs rdx, 0xd5037ba82e12416f
inc dword [rax + 8]
mov rcx, qword [0x180109038]
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
movss xmm9, dword [rcx]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x180109008]
movabs rsi, 0xab54a438726d25d5
cmp rax, qword [rcx + 0x10]
jne 0x18009b2db
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x18009b2db
mov rcx, qword [0x180109038]
movss xmm6, dword [0x18019d658]
movss xmm7, dword [0x18019d660]
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
movaps xmm3, xmm6
mov byte [rsp + 0x28], 1
xorps xmm2, xmm2
mov dword [rsp + 0x20], 2
movaps xmm1, xmm7
mov ecx, eax
call fcn.180080b80
mov rcx, qword [0x180109038]
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
mov ecx, eax
call fcn.180080500
mov rcx, qword [0x180109038]
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
addss xmm9, dword [0x1800b1488]
movaps xmm2, xmm9
jmp 0x18009b3d0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x180109008]
cmp rax, qword [rcx + 0x10]
jne 0x18009b374
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x18009b374
movss xmm6, dword [0x18019d658]
movss xmm7, dword [0x18019d660]
call fcn.18007f040
mov ecx, eax
call fcn.18007a510
movaps xmm3, xmm6
mov byte [rsp + 0x28], 1
xorps xmm2, xmm2
mov dword [rsp + 0x20], 2
movaps xmm1, xmm7
mov ecx, eax
call fcn.180080b80
call fcn.18007f040
mov ecx, eax
call fcn.18007a510
mov ecx, eax
call fcn.180080500
call fcn.18007f040
mov ecx, eax
call fcn.18007a510
mulss xmm9, dword [0x1800b14cc]
subss xmm9, dword [0x1800b1488]
movaps xmm2, xmm9
jmp 0x18009b3d0
movss xmm6, dword [0x18019d658]
movss xmm7, dword [0x18019d664]
movss xmm8, dword [0x18019d660]
call fcn.18007f040
mov ecx, eax
call fcn.18007a510
movaps xmm3, xmm6
mov byte [rsp + 0x28], 1
movaps xmm2, xmm7
mov dword [rsp + 0x20], 2
movaps xmm1, xmm8
mov ecx, eax
call fcn.180080b80
comiss xmm9, dword [0x1800b148c]
jbe 0x18009b3da
call fcn.18007f040
mov ecx, eax
call fcn.18007a510
xorps xmm2, xmm2
mov edx, eax
mov rcx, rsi
call fcn.18004b8b0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x180109008]
cmp rax, qword [rcx + 0x10]
jne 0x18009b478
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x18009b478
movss xmm8, dword [0x18019d658]
addss xmm8, dword [0x1800d4360]
mov rcx, qword [0x180109038]
movss xmm6, dword [0x18019d664]
movss xmm7, dword [0x18019d660]
movss dword [0x18019d658], xmm8
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
movaps xmm3, xmm8
mov byte [rsp + 0x28], 1
movaps xmm2, xmm6
mov dword [rsp + 0x20], 2
movaps xmm1, xmm7
mov ecx, eax
call fcn.180080b80
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x180109008]
movss xmm9, dword [0x1800d44ec]
cmp rax, qword [rcx + 0x10]
jne 0x18009b51b
mov ecx, 0x44
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x18009b51b
movss xmm8, dword [0x18019d658]
mov rcx, qword [0x180109038]
addss xmm8, xmm9
movss xmm6, dword [0x18019d664]
movss xmm7, dword [0x18019d660]
movss dword [0x18019d658], xmm8
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
movaps xmm3, xmm8
mov byte [rsp + 0x28], 1
movaps xmm2, xmm6
mov dword [rsp + 0x20], 2
movaps xmm1, xmm7
mov ecx, eax
call fcn.180080b80
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x180109008]
cmp rax, qword [rcx + 0x10]
jne 0x18009b5b5
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x18009b5b5
movss xmm8, dword [0x18019d660]
mov rcx, qword [0x180109038]
addss xmm8, xmm9
movss xmm6, dword [0x18019d658]
movss xmm7, dword [0x18019d664]
movss dword [0x18019d660], xmm8
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
movaps xmm3, xmm6
mov byte [rsp + 0x28], 1
movaps xmm2, xmm7
mov dword [rsp + 0x20], 2
movaps xmm1, xmm8
mov ecx, eax
call fcn.180080b80
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x180109008]
movaps xmm9, xmmword [rsp + 0x30]
cmp rax, qword [rcx + 0x10]
jne 0x18009b659
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x18009b659
movss xmm8, dword [0x18019d660]
addss xmm8, dword [0x1800d4360]
mov rcx, qword [0x180109038]
movss xmm6, dword [0x18019d658]
movss xmm7, dword [0x18019d664]
movss dword [0x18019d660], xmm8
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
movaps xmm3, xmm6
mov byte [rsp + 0x28], 1
movaps xmm2, xmm7
mov dword [rsp + 0x20], 2
movaps xmm1, xmm8
mov ecx, eax
call fcn.180080b80
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x180109008]
movaps xmm8, xmmword [rsp + 0x40]
cmp rax, qword [rcx + 0x10]
jne 0x18009b751
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x18009b751
mov rcx, qword [0x180109038]
movss xmm6, dword [0x18019d658]
movss xmm7, dword [0x18019d664]
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
movaps xmm3, xmm6
mov byte [rsp + 0x28], 1
movaps xmm2, xmm7
mov dword [rsp + 0x20], 2
xorps xmm1, xmm1
mov ecx, eax
call fcn.180080b80
mov rcx, qword [0x180109038]
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
mov ecx, eax
call fcn.180080500
mov rcx, qword [0x180109038]
call fcn.18000c530
mov rcx, qword [0x180109038]
mov rdx, rdi
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rdx, qword [rax]
mov ecx, dword [rdx]
call fcn.18007a510
xorps xmm2, xmm2
mov edx, eax
mov rcx, rsi
call fcn.18004b8b0
movaps xmm6, xmmword [rsp + 0x60]
mov rsi, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x80]
movaps xmm7, xmmword [rsp + 0x50]
add rsp, 0x70
pop rdi
ret
call fcn.18000c530
mov rdx, rdi
mov rcx, qword [0x180109038]
call fcn.18000c5b0
mov rax, qword [0x180109038]
mov rcx, qword [rax]
mov ecx, dword [rcx]
call fcn.18007a510
mov r8b, 1
mov edx, eax
movabs rcx, 0x89f149b6131e57da
add rsp, 0x70
pop rdi
jmp fcn.18004ae20
call fcn.18000c530
movabs rdx, 0xd80958fc74e988a6
jmp 0x18009b779