Function at 0x1800482b0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x90
mov rax, qword [0x1800dd320]
mov rcx, qword [rax + 0x10]
mov rax, qword [0x1800dd240]
mov rdi, qword [rcx]
cmp byte [rax + 0x127], 0
je 0x1800482f0
test rdi, rdi
je 0x1800482f0
mov rax, qword [rdi + 8]
test rax, rax
je 0x1800482f0
mov byte [rax + 0x189], 1
mov rax, qword [0x1800dd240]
mov qword [rsp + 0xa8], rbx
lea rbx, [rdi + 8]
cmp byte [rax + 0x12c], 0
je 0x18004833b
test rdi, rdi
je 0x180048371
mov rdx, qword [rbx]
test rdx, rdx
je 0x180048371
mov rcx, qword [0x1800dd310]
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180048378
mov rax, qword [rcx + 8]
mov dword [r8 + rax], 0x41700000
jmp 0x180048371
test rdi, rdi
je 0x180048371
mov r8, qword [rdi + 8]
test r8, r8
je 0x180048371
mov rcx, qword [0x1800dd310]
lea rbx, [rdi + 8]
mov rax, qword [rcx + 0x38]
mov r9, qword [r8 + rax]
test r9, r9
je 0x180048378
mov rax, qword [rcx + 8]
lea rbx, [rdi + 8]
mov dword [r9 + rax], 0x3f800000
mov rcx, qword [0x1800dd310]
mov rax, qword [0x1800dd240]
cmp byte [rax + 0x129], 0
je 0x1800483b5
test rdi, rdi
je 0x1800483b5
mov rdx, qword [rbx]
test rdx, rdx
je 0x1800483b5
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x1800483b5
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x2c000
mov rcx, qword [0x1800dd310]
mov rax, qword [0x1800dd240]
cmp byte [rax + 0x126], 0
je 0x1800483f2
test rdi, rdi
je 0x1800483f2
mov rdx, qword [rbx]
test rdx, rdx
je 0x1800483f2
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x1800483f2
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x16000
mov rcx, qword [0x1800dd310]
mov rax, qword [0x1800dd240]
cmp byte [rax + 0x17c], 0
je 0x18004842f
test rdi, rdi
je 0x18004842f
mov rdx, qword [rbx]
test rdx, rdx
je 0x18004842f
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x18004842f
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x5800
mov rcx, qword [0x1800dd310]
mov rax, qword [0x1800dd240]
cmp byte [rax + 0x17d], 0
je 0x18004846c
test rdi, rdi
je 0x18004846c
mov rdx, qword [rbx]
test rdx, rdx
je 0x18004846c
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x18004846c
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0xb000
mov rcx, qword [0x1800dd310]
mov rax, qword [0x1800dd240]
cmp byte [rax + 0x125], 0
je 0x1800484a2
test rdi, rdi
je 0x1800484a2
mov rdx, qword [rbx]
test rdx, rdx
je 0x1800484a2
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x1800484a2
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 2
mov rax, qword [0x1800dd240]
cmp byte [rax + 0x128], 0
je 0x1800484f4
test rdi, rdi
je 0x180048534
mov rax, qword [rbx]
test rax, rax
je 0x180048534
mov rax, qword [rax + 0x30]
test rax, rax
je 0x180048534
mov rax, qword [rax + 0x10]
test rax, rax
je 0x180048534
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x180048534
mov rax, qword [rcx + 0x70]
test rax, rax
je 0x180048534
mov rax, qword [rax]
test rax, rax
je 0x180048534
mov dword [rax + 0x2c], 0xbf800000
jmp 0x180048534
test rdi, rdi
je 0x180048534
mov rax, qword [rbx]
test rax, rax
je 0x180048534
mov rax, qword [rax + 0x30]
test rax, rax
je 0x180048534
mov rax, qword [rax + 0x10]
test rax, rax
je 0x180048534
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x180048534
mov rax, qword [rcx + 0x70]
test rax, rax
je 0x180048534
mov rax, qword [rax]
test rax, rax
je 0x180048534
mov dword [rax + 0x2c], 0x3e800000
mov rax, qword [0x1800dd240]
cmp byte [rax + 0x124], 0
je 0x180048592
mov rax, qword [0x1800dd320]
mov rax, qword [rax + 0x30]
test rax, rax
je 0x180048559
mov rax, qword [rax]
jmp 0x180048561
mov rax, qword [rsp + 0xa0]
test rax, rax
je 0x180048592
test rdi, rdi
je 0x180048592
mov rcx, qword [rbx]
test rcx, rcx
je 0x180048592
mov rcx, qword [rcx + 0x30]
test rcx, rcx
je 0x180048592
movsd xmm0, qword [rax + 0x3d0]
movsd qword [rcx + 0x30], xmm0
mov eax, dword [rax + 0x3d8]
mov dword [rcx + 0x38], eax
mov rax, qword [0x1800dd240]
mov qword [rsp + 0xb8], rsi
cmp byte [rax + 0x12a], 0
je 0x1800485e6
cmp byte [0x1800dd1b1], 0
jne 0x1800485e6
mov rcx, qword [0x1800dd320]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rcx + 0x88]
mov rdx, qword [rax]
mov rax, qword [rcx + 0x60]
test rdx, rdx
jne 0x1800485d5
xor ecx, ecx
jmp 0x1800485d9
mov rcx, qword [rdx + 8]
call rax
mov ecx, eax
call rsi
mov byte [0x1800dd1b1], 1
mov rcx, qword [0x1800dd240]
cmp byte [rcx + 0x12b], 0
je 0x1800488e0
mov ecx, dword [rcx + 0x120]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18004861c
cmp byte [0x1800dd1b2], 0
sete al
mov byte [0x1800dd1b2], al
jmp 0x180048623
movzx eax, byte [0x1800dd1b2]
test al, al
je 0x1800488f9
mov rax, qword [0x1800dd320]
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x180048640
mov r8, qword [rcx]
jmp 0x180048648
mov r8, qword [rsp + 0xa0]
test r8, r8
je 0x1800488e0
mov qword [rsp + 0xb0], rbp
movaps xmmword [rsp + 0x80], xmm6
xorps xmm6, xmm6
movaps xmmword [rsp + 0x40], xmm10
movaps xmmword [rsp + 0x30], xmm11
movaps xmmword [rsp + 0x70], xmm7
movaps xmmword [rsp + 0x60], xmm8
movaps xmmword [rsp + 0x50], xmm9
test rdi, rdi
je 0x18004873f
mov rax, qword [rbx]
test rax, rax
je 0x1800486a2
mov rcx, qword [rax + 0x30]
xorps xmm0, xmm0
test rcx, rcx
je 0x1800486a2
movups xmmword [rcx + 0x30], xmm0
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800486c7
mov rdx, qword [0x1800dd310]
mov rax, qword [rdx + 0x38]
mov rcx, qword [rcx + rax]
mov rax, qword [rdx + 0x10]
mov qword [rcx + rax], 2
jmp 0x1800486de
mov rax, qword [0x1800dd310]
mov rcx, qword [rax + 0x10]
mov qword [rcx], 2
test rdi, rdi
je 0x180048751
mov rcx, qword [rbx]
test rcx, rcx
je 0x180048708
mov byte [rcx + 0x2c], 0x25
mov rcx, qword [rbx]
test rcx, rcx
je 0x180048708
xorps xmm0, xmm0
unpcklps xmm0, xmm6
movsd qword [rcx + 0x320], xmm0
movss dword [rcx + 0x328], xmm6
test rdi, rdi
je 0x180048751
mov rsi, qword [rbx]
test rsi, rsi
je 0x180048751
movsd xmm7, qword [rsi + 0x90]
mov esi, dword [rsi + 0x98]
movaps xmm8, xmm7
movsd qword [rsp + 0x20], xmm7
movss xmm9, dword [rsp + 0x20]
shufps xmm8, xmm8, 0x55
movd xmm6, esi
jmp 0x180048764
mov rax, qword [0x1800dd310]
mov rcx, qword [rax + 0x10]
mov qword [rcx], 2
xorps xmm8, xmm8
movd esi, xmm6
xorps xmm7, xmm7
xorps xmm9, xmm9
unpcklps xmm7, xmm8
movsd xmm0, qword [r8 + 0x3d0]
mov ecx, reloc.WS2_32.dll_recv
mov ebp, dword [r8 + 0x3d8]
movsd qword [rsp + 0x20], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180048794
movss xmm0, dword [0x1800ce8f8]
jmp 0x18004879c
movss xmm0, dword [0x1800ce87c]
mov ecx, 0x57
movss dword [0x1800dc0b8], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm11, dword [rsp + 0x24]
movd xmm10, ebp
mov rbp, qword [rsp + 0xb0]
test ax, ax
jns 0x180048806
movss xmm2, dword [0x1800dc0b8]
movaps xmm1, xmm11
movaps xmm0, xmm2
mulss xmm1, xmm2
mulss xmm0, dword [rsp + 0x20]
addss xmm8, xmm1
addss xmm9, xmm0
movaps xmm0, xmm10
mulss xmm0, xmm2
addss xmm6, xmm0
movaps xmm7, xmm9
unpcklps xmm7, xmm8
movaps xmm7, xmm7
movd esi, xmm6
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18004884f
movss xmm1, dword [0x1800dc0b8]
movaps xmm0, xmm1
mulss xmm11, xmm1
mulss xmm0, dword [rsp + 0x20]
mulss xmm10, xmm1
subss xmm8, xmm11
subss xmm9, xmm0
subss xmm6, xmm10
movaps xmm7, xmm9
unpcklps xmm7, xmm8
movaps xmm7, xmm7
movd esi, xmm6
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movaps xmm11, xmmword [rsp + 0x30]
movaps xmm10, xmmword [rsp + 0x40]
movaps xmm9, xmmword [rsp + 0x50]
movaps xmm8, xmmword [rsp + 0x60]
test ax, ax
jns 0x180048883
addss xmm6, dword [0x1800dc0b8]
movd esi, xmm6
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18004889f
subss xmm6, dword [0x1800dc0b8]
movd esi, xmm6
movaps xmm6, xmmword [rsp + 0x80]
test rdi, rdi
je 0x1800488db
mov rax, qword [rbx]
test rax, rax
je 0x1800488db
movsd qword [rax + 0x90], xmm7
mov dword [rax + 0x98], esi
mov rax, qword [rbx]
test rax, rax
je 0x1800488db
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x1800488db
movsd qword [rcx + 0x50], xmm7
mov dword [rcx + 0x58], esi
movaps xmm7, xmmword [rsp + 0x70]
mov rsi, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xa8]
add rsp, 0x90
pop rdi
ret
mov rdx, qword [0x1800dd310]
test rdi, rdi
je 0x180048923
mov rcx, qword [rbx]
test rcx, rcx
je 0x180048923
mov rax, qword [rdx + 0x38]
mov rcx, qword [rcx + rax]
mov rax, qword [rdx + 0x10]
mov qword [rcx + rax], 0
jmp 0x1800488e0
mov rax, qword [rdx + 0x10]
xor ecx, ecx
mov qword [rcx + rax], rcx
jmp 0x1800488e0