Function at 0x180037e80
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb8]
sub rsp, 0x190
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1800593b0]
xor rax, rsp
mov qword [rbp - 0x20], rax
cmp byte [0x180059e0f], 0
je 0x180038948
mov ecx, dword [0x180059d28]
mov rax, qword gs:[0x58]
mov esi, 4
mov rdi, qword [rax + rcx*8]
mov eax, dword [rdi + rsi]
cmp dword [0x18005b328], eax
jle 0x180037f84
lea rcx, [0x18005b328]
call fcn.18004407c
cmp dword [0x18005b328], 0xffffffff
jne 0x180037f84
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x180037f56
imul rax, rax, 0x64
jmp 0x180037f71
cqo
idiv rbx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, r8
mov qword [0x18005b318], rax
lea rcx, [0x18005b328]
call fcn.18004401c
mov eax, dword [rdi + rsi]
cmp dword [0x18005b2fc], eax
jle 0x180037ff0
lea rcx, [0x18005b2fc]
call fcn.18004407c
cmp dword [0x18005b2fc], 0xffffffff
jne 0x180037ff0
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x180037fc2
imul rax, rax, 0x64
jmp 0x180037fdd
cqo
idiv rbx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, r8
mov qword [0x18005b340], rax
lea rcx, [0x18005b2fc]
call fcn.18004401c
call fcn.18003d7c0
mov rsi, rax
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0x30]
lea rdx, str.com_craftrise_client_S
call r8
mov qword [0x18005a288], rax
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x108]
lea r9, str.__Lcom_craftrise_client_fa_
lea r8, [0x18004f2fc]
mov rdx, rax
call r10
mov rbx, rax
call fcn.18003d7c0
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x180059db8]
call fcn.1800343c0
mov rbx, rax
mov rcx, qword [0x180059db8]
mov rax, qword [rcx]
mov r8, qword [rax + 0x30]
lea rdx, str.com_craftrise_client_S
call r8
mov qword [0x18005a288], rax
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x2f0]
lea r9, str.Lcom_craftrise_client_cf_
lea r8, [0x18004fb24]
mov rdx, rax
call r10
mov rdi, rax
mov qword [0x18005a2b0], rax
call fcn.18003d7c0
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x2f8]
mov r8, rdi
mov rdx, rax
call r9
mov qword [rsp + 0x70], rax
test rsi, rsi
je 0x180038948
lea rcx, [rsp + 0x70]
call fcn.18003d880
mov r14, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x180038948
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xf8]
mov rdx, rax
call r8
mov rsi, rax
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x108]
lea r9, [0x18004f400]
lea r8, str.size
mov rdx, rax
call r10
mov rdi, rax
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x108]
lea r9, str._I_Ljava_lang_Object_
lea r8, [0x18004f420]
mov rdx, rsi
call r10
mov rsi, rax
mov qword [rsp + 0x28], rax
mov r8, rdi
mov rdx, r14
mov rcx, qword [0x180059db8]
call fcn.1800343f0
mov edi, eax
mov dword [rsp + 0x20], eax
xor r13d, r13d
test eax, eax
jle 0x180038948
xorps xmm15, xmm15
movss xmm12, dword [0x18004ffdc]
movss xmm13, dword [0x18004ff9c]
movsd xmm14, qword [0x180050058]
mov r9d, r13d
mov r8, rsi
mov rdx, r14
mov rcx, qword [0x180059db8]
call fcn.1800343c0
mov r12, rax
test rax, rax
je 0x18003893c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x68], xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], recv
mov byte [rbp - 0x68], al
mov qword [rbp - 0x48], r12
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], socket
mov byte [rsp + 0x30], al
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x30]
call fcn.18003dc00
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.18003dc00
movups xmm0, xmmword [rax]
movsd xmm2, qword [rax + 0x10]
movsd xmm10, qword [rsp + 0x58]
movaps xmm3, xmm10
subsd xmm3, xmm0
movsd xmm1, qword [rsp + 0x60]
unpckhpd xmm0, xmm0
subsd xmm1, xmm0
movsd xmm11, qword [rsp + 0x68]
movaps xmm0, xmm11
movsd qword [rsp + 0x40], xmm2
subsd xmm0, xmm2
mulsd xmm3, xmm3
mulsd xmm1, xmm1
addsd xmm3, xmm1
mulsd xmm0, xmm0
addsd xmm3, xmm0
xorps xmm0, xmm0
ucomisd xmm0, xmm3
ja 0x18003827d
sqrtpd xmm9, xmm3
jmp 0x180038289
movaps xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm9, xmm0
mov rcx, qword [0x180059db8]
mov rax, qword [rcx]
mov r8, qword [rax + 0x30]
lea rdx, str.com_craftrise_mj
call r8
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x108]
lea r9, [0x18004ff1c]
lea r8, [0x18004ff18]
mov rdx, rax
call r10
mov r8, rax
mov rdx, r12
mov rcx, qword [0x180059db8]
call fcn.180034420
movaps xmm8, xmm0
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x68]
call fcn.18003da30
nop
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x78]
call fcn.1800349d0
nop
comisd xmm9, xmm15
jbe 0x180038860
movss xmm0, dword [0x180059400]
cvtps2pd xmm0, xmm0
comisd xmm0, xmm9
jbe 0x1800387c5
ucomiss xmm8, xmm12
jp 0x180038326
je 0x1800387c5
ucomiss xmm8, xmm13
jp 0x180038332
je 0x1800387c5
mov rdi, qword [0x18005a550]
mov rsi, qword [0x18005a558]
cmp rdi, rsi
je 0x180038393
cmp qword [rbp - 0x70], 0x10
setae r15b
mov r14, qword [rbp - 0x78]
lea rdx, [rsp + 0x78]
test r15b, r15b
cmovne rdx, qword [rsp + 0x78]
mov r8, qword [rdi + 0x10]
mov rcx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x180038371
mov rcx, qword [rdi]
cmp r8, r14
jne 0x18003837f
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18003838a
add rdi, 0x20
cmp rdi, rsi
je 0x180038393
jmp 0x180038352
cmp rdi, rsi
jne 0x1800387bc
mov rcx, qword [0x180059db8]
mov rax, qword [rcx]
mov r8, qword [rax + 0x30]
lea rdx, str.com_craftrise_client_S
call r8
mov qword [0x18005a288], rax
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x108]
lea r9, str.__Lcom_craftrise_client_fa_
lea r8, [0x18004f2fc]
mov rdx, rax
call r10
mov rdi, rax
call fcn.18003d7c0
mov r8, rdi
mov rdx, rax
mov rcx, qword [0x180059db8]
call fcn.1800343c0
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x18003840f
imul rax, rax, 0x64
jmp 0x18003842a
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
sub rax, qword [0x18005b318]
cmp rax, 0xbebc200
jl 0x1800387bc
movaps xmm1, xmm8
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
lea rdx, [0x1800073f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rsi, qword [rbp - 0x48]
cmp byte [0x180059dd1], 0
jne 0x180038624
mov rcx, qword [0x180059db8]
mov rax, qword [rcx]
mov r8, qword [rax + 0x30]
lea rdx, str.com_craftrise_m9
call r8
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x2f0]
lea r9, str.DFGHIN
lea r8, [0x18004fb3c]
mov rdx, rax
call r10
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x338]
mov r8, rax
mov rdx, rsi
call r9
movaps xmm7, xmm0
mov rcx, qword [0x180059db8]
mov rax, qword [rcx]
mov r8, qword [rax + 0x30]
lea rdx, str.com_craftrise_m9
call r8
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x2f0]
lea r9, str.DFGHIN
lea r8, [0x18004fb40]
mov rdx, rax
call r10
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x338]
mov r8, rax
mov rdx, rsi
call r9
movaps xmm6, xmm0
mov rcx, qword [0x180059db8]
mov rax, qword [rcx]
mov r8, qword [rax + 0x30]
lea rdx, str.com_craftrise_m9
call r8
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x2f0]
lea r9, str.DFGHIN
lea r8, [0x18004fb44]
mov rdx, rax
call r10
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x338]
mov r8, rax
mov rdx, rsi
call r9
subsd xmm7, qword [0x180050028]
subsd xmm10, xmm7
subsd xmm0, qword [0x180050028]
subsd xmm11, xmm0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], socket
mov byte [rsp + 0x30], 0
mov qword [rsp + 0x50], rbx
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm10
lea rcx, [rsp + 0x30]
call fcn.18003d980
nop
mov rcx, r12
call fcn.180034750
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x1800385f5
imul rax, rax, 0x64
jmp 0x180038610
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
mov qword [0x18005b318], rax
cmp byte [0x180059dd1], 0
je 0x1800387bc
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x180038642
imul rax, rax, 0x64
jmp 0x18003865d
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
sub rax, qword [0x18005b340]
cmp rax, 0x1dcd6500
jl 0x1800387bc
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], socket
mov byte [rsp + 0x30], 0
mov qword [rsp + 0x50], rbx
mov rcx, qword [0x180059db8]
mov rax, qword [rcx]
mov r8, qword [rax + 0x30]
lea rdx, str.com_craftrise_m9
call r8
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x2f0]
lea r9, str.DFGHIN
lea r8, [0x18004fb44]
mov rdx, rax
call r10
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x338]
mov r8, rax
mov rdx, rsi
call r9
movaps xmm7, xmm0
mov rcx, qword [0x180059db8]
mov rax, qword [rcx]
mov r8, qword [rax + 0x30]
lea rdx, str.com_craftrise_m9
call r8
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r10, qword [rdx + 0x2f0]
lea r9, str.DFGHIN
lea r8, [0x18004fb40]
mov rdx, rax
call r10
mov rcx, qword [0x180059db8]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x338]
mov r8, rax
mov rdx, rsi
call r9
movaps xmm6, xmm0
addsd xmm6, qword [0x180050038]
mov rcx, qword [0x180059db8]
mov rax, qword [rcx]
mov r8, qword [rax + 0x30]
lea rdx, str.com_craftrise_m9
call r8
mov rcx, qword [0x180059db8]
mov r8, qword [rcx]
mov r10, qword [r8 + 0x2f0]
lea r9, str.DFGHIN
lea r8, [0x18004fb3c]
mov rdx, rax
call r10
mov rcx, qword [0x180059db8]
mov r8, qword [rcx]
mov r9, qword [r8 + 0x338]
mov r8, rax
mov rdx, rsi
call r9
movaps xmm3, xmm7
movaps xmm2, xmm6
movaps xmm1, xmm0
lea rcx, [rsp + 0x30]
call fcn.18003d980
nop
mov edi, dword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
comisd xmm14, xmm9
jbe 0x18003885b
ucomiss xmm8, xmm12
jp 0x1800387dc
je 0x18003885b
ucomiss xmm8, xmm13
jp 0x1800387e4
je 0x18003885b
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180038800
lea rcx, [rsp + 0x78]
call fcn.180034ad0
mov ecx, 0x2e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x18003885b
lea rdx, [rsp + 0x78]
call fcn.18003b6e0
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0x10
cmovae rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x78]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.180007870
lea rdx, str._removed_from_whitelist
mov rcx, rax
call fcn.180007220
lea rdx, [0x1800073f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r14, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18003889c
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180038897
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800389ad
call fcn.18004389c
mov qword [rbp - 0x78], 0
mov qword [rbp - 0x70], recv
mov byte [rsp + 0x78], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1800388ed
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800388e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800389b4
call fcn.18004389c
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x180038928
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180038923
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800389bb
call fcn.18004389c
mov qword [rbp - 0x58], 0
mov qword [rbp - 0x50], recv
mov byte [rbp - 0x68], 0
inc r13d
cmp r13d, edi
jl 0x1800381a0
mov rcx, qword [rbp - 0x20]
xor rcx, rsp
call fcn.180043840
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3