Function at 0x10046b5d
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x11c
push str.renderMap__
call fcn.1005baee
pop ecx
call fcn.10029d80
test eax, eax
jne 0x10046f52
push ebp
xor ebp, ebp
push esi
cmp dword [0x1040b874], ebp
je 0x10046bd6
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 9
call esi
test ax, ax
jns 0x10046ba2
cmp dword [0x103ef0d8], ebp
jne 0x10046f50
mov eax, dword [0x1040b88c]
cmp dword [eax], ebp
jne 0x10046f50
push 0x70
call esi
test ax, ax
js 0x10046f50
push 0x74
call esi
test ax, ax
js 0x10046f50
push 0x79
call esi
test ax, ax
js 0x10046f50
push ebx
push 1
push 0xffffffffffffffff
call fcn.100299e1
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x10046f4f
push edi
cmp dword [0x10161378], ebp
je 0x10046d08
cmp dword [0x1040b874], ebp
je 0x10046c74
mov esi, ebp
lea eax, [esp + 0x20]
push eax
push esi
call fcn.10041457
pop ecx
pop ecx
test eax, eax
je 0x10046c66
mov eax, dword [0x1040b878]
cmp dword [eax + esi*4 + 0x26], ebp
je 0x10046c66
push esi
push esi
call fcn.1004141e
pop ecx
push eax
push 0x1009981c
lea eax, [esp + 0x38]
push 0xff
push eax
call fcn.100444c9
add esp, 0x14
lea eax, [esp + 0x2c]
push eax
push 0xff000000
push esi
call fcn.10041cce
pop ecx
pop ecx
push eax
lea eax, [esp + 0x28]
push eax
mov eax, dword [ebx + 0x14]
add eax, 0x30
push eax
call fcn.10046f59
add esp, 0x10
inc esi
cmp esi, 0x3ec
jl 0x10046c03
jmp 0x10046d08
mov ecx, dword [0x104190ac]
mov eax, dword [ecx]
call dword [eax]
lea ecx, [esp + 0x14]
push ecx
lea ecx, [eax + 0x1f84]
call fcn.100162d9
jmp 0x10046cfe
mov edi, dword [esi + 4]
test edi, edi
je 0x10046cee
mov ecx, dword [edi]
mov eax, dword [ecx + 0xc]
add eax, edi
cmp eax, dword [0x104190b4]
je 0x10046cee
mov ecx, dword [ecx + 4]
add ecx, edi
mov eax, dword [ecx]
call dword [eax + 0xb0]
push eax
push 0x10086bb0
lea eax, [esp + 0x34]
push 0xff
push eax
call fcn.100444c9
mov eax, dword [edi]
add esp, 0x10
mov ecx, dword [eax + 4]
lea eax, [esp + 0x2c]
add ecx, edi
push eax
push 0xffffffffffffffff
mov eax, dword [ecx]
call dword [eax + 0x28]
push eax
mov eax, dword [ebx + 0x14]
add eax, 0x30
push eax
call fcn.10046f59
add esp, 0x10
add esi, 8
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], esi
call fcn.100162a8
mov esi, dword [esp + 0x18]
cmp esi, dword [esp + 0x1c]
jb 0x10046c90
mov eax, dword [0x10161380]
cmp dword [eax + 0x99], ebp
je 0x10046eaf
cmp dword [0x1040b874], ebp
je 0x10046e13
mov eax, dword [0x1040b87c]
test eax, eax
je 0x10046eaf
mov edi, ebp
mov esi, 0x1134
cmp dword [esi + eax + 0x1f40], 1
jne 0x10046dfc
mov ecx, dword [esi + eax]
test ecx, ecx
je 0x10046dfc
mov ecx, dword [ecx + 0x4c]
test ecx, ecx
je 0x10046dfc
movzx eax, word [ecx + 0x22]
push eax
call fcn.10029e11
pop ecx
mov ecx, dword [0x1040b878]
mov ebp, eax
mov ecx, dword [ecx + 0x1e]
movzx ecx, word [ecx + 0xfc]
cmp ecx, edi
je 0x10046df7
mov ecx, dword [0x1040b87c]
mov ecx, dword [esi + ecx]
push dword [ecx + 0x4c]
call fcn.1002c0dd
push eax
call fcn.10029c49
push edi
push dword [ebp + 8]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x3c]
push 0x1009981c
push 0xff
push eax
call fcn.100444c9
lea eax, [esp + 0x48]
push eax
mov eax, dword [esp + 0x30]
movzx ecx, al
movzx eax, ah
or ecx, 0xffffff00
shl ecx, 8
or ecx, eax
movzx eax, byte [esp + 0x32]
shl ecx, 8
or ecx, eax
mov eax, dword [0x1040b87c]
push ecx
mov eax, dword [esi + eax]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 0x14]
add eax, 0x30
push eax
mov eax, dword [ebx + 0x14]
add eax, 0x30
push eax
call fcn.10046f59
add esp, 0x2c
mov eax, dword [0x1040b87c]
add esi, 4
inc edi
cmp esi, 0x3074
jl 0x10046d39
xor ebp, ebp
jmp 0x10046eaf
mov eax, dword [0x1016137c]
mov esi, ebp
cmp dword [eax + 8], ebp
jle 0x10046eaf
push 1
push esi
call fcn.1002c12f
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x10046ea0
push edi
call fcn.1002c0dd
push eax
call fcn.10029c49
mov dword [esp + 0x18], eax
movzx eax, word [edi + 0x22]
push eax
call fcn.10029e11
push esi
push dword [eax + 8]
lea eax, [esp + 0x40]
push 0x10099824
push 0xff
push eax
call fcn.100444c9
lea eax, [esp + 0x4c]
push eax
mov eax, dword [esp + 0x34]
movzx ecx, al
or ecx, 0xffffff00
movzx eax, ah
shl ecx, 8
or ecx, eax
movzx eax, byte [esp + 0x36]
shl ecx, 8
or ecx, eax
mov eax, dword [edi + 0x14]
add eax, 0x30
push ecx
push eax
mov eax, dword [ebx + 0x14]
add eax, 0x30
push eax
call fcn.10046f59
add esp, 0x30
mov eax, dword [0x1016137c]
inc esi
cmp esi, dword [eax + 8]
jl 0x10046e23
mov eax, dword [0x10161380]
cmp dword [eax + 0xd9], ebp
je 0x10046f3b
mov edi, ebp
mov esi, ebp
lea eax, [esp + 0x20]
push eax
mov eax, dword [0x10161380]
add eax, 0x220c4
add eax, esi
push eax
call fcn.1003fa70
lea eax, [esp + 0x28]
push eax
call fcn.1003fb66
add esp, 0xc
test eax, eax
jne 0x10046f2f
lea eax, [esp + 0x20]
push eax
mov eax, dword [ebx + 0x14]
add eax, 0x30
push eax
call fcn.1003fa80
fstp qword [esp]
push edi
push str.Teleport__d___0.1f_
lea eax, [esp + 0x3c]
push 0xff
push eax
call fcn.100444c9
lea eax, [esp + 0x44]
push eax
push 0xff00c8c8
lea eax, [esp + 0x40]
push eax
mov eax, dword [ebx + 0x14]
add eax, 0x30
push eax
call fcn.10046f59
add esp, 0x28
add esi, 0x48
inc edi
cmp esi, 0x2d0
jl 0x10046ec0
mov eax, dword [ebx + 0x14]
push ebp
add eax, 0x30
push 0xffffffffffffffff
push eax
push eax
call fcn.10046f59
add esp, 0x10
pop edi
pop ebx
pop esi
pop ebp
add esp, 0x11c
ret