Function at 0x1801aea90
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
movss xmm0, dword [0x1802c9e3c]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax - 0x20], rdi
mov edi, dword [0x1802c9b04]
mov qword [rax - 0x28], r12
movaps xmmword [rax - 0x38], xmm6
xorps xmm6, xmm6
ucomiss xmm0, xmm6
mov r12d, 4
jne 0x1801aeb12
call fcn.18019bf80
mov rbx, rax
test rax, rax
je 0x1801aeb0a
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rdi*8]
mov eax, dword [r12 + rcx]
cmp dword [0x180300158], eax
jg 0x1801aefc3
mov rax, qword [0x1802fffd0]
movss xmm6, dword [rax + rbx]
movss dword [0x1802c9e3c], xmm6
call fcn.18019bf80
mov rcx, rax
call fcn.18019be90
xor r15d, r15d
mov rsi, rax
movabs r14, 0x7fffffff0000
lea rdx, [rax + 0x18]
cmp rdx, 0x40000
jbe 0x1801aed38
lea rcx, [rdx + 8]
cmp rcx, r14
jae 0x1801aeb6a
mov rcx, qword [rdx]
add rcx, 0x18
cmp rcx, 0x40000
jbe 0x1801aeb6a
lea rax, [rcx + 4]
cmp rax, r14
jae 0x1801aeb6a
cmp dword [rcx], 0x40547fde
je 0x1801aebb1
cmp rdx, 0x40000
jbe 0x1801aed38
lea rax, [rdx + 8]
cmp rax, r14
jae 0x1801aed38
mov rcx, qword [rdx]
add rcx, 0x18
cmp rcx, 0x40000
jbe 0x1801aed38
lea rax, [rcx + 4]
cmp rax, r14
jae 0x1801aed38
cmp dword [rcx], 0x847b9bf0
jne 0x1801aed38
cmp byte [0x1802c9db9], r15b
je 0x1801aed38
call fcn.18019bf80
mov rbx, rax
test rax, rax
je 0x1801aec01
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx + rdi*8]
mov ecx, dword [r12 + rdx]
cmp dword [0x1803006fc], ecx
jg 0x1801aeffe
mov rax, qword [0x180300498]
movss xmm0, dword [rbx + rax]
comiss xmm0, dword [0x180182fd0]
jae 0x1801aed38
lea rcx, [rsi + 0xa8]
cmp rcx, 0x40000
jbe 0x1801aed2b
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801aed2b
mov rdi, qword [rcx]
lea rcx, [rdi + 0x190]
cmp rcx, 0x40000
jbe 0x1801aed2b
lea rax, [rcx + 1]
cmp rax, r14
jae 0x1801aed2b
movzx ebx, byte [rcx]
call fcn.18019bf80
mov rcx, rax
call fcn.18019b840
movss xmm6, dword [rax]
test bl, bl
je 0x1801aed38
movss xmm0, dword [0x1802c9e3c]
addss xmm0, dword [0x180182af0]
comiss xmm6, xmm0
jbe 0x1801aed38
mov r8, qword [0x1802c9c90]
lea r9, [0x18017d240]
add r8, 0x577810
mov dword [rsp + 0x30], 7
mov edx, r15d
mov rcx, r15
nop
movzx eax, word [rcx + r9]
inc edx
mov word [rsp + rcx + 0x34], ax
lea rcx, [rcx + 2]
movsxd rax, dword [rsp + 0x30]
cmp edx, eax
jl 0x1801aeca0
mov word [rsp + rax*2 + 0x34], r15w
lea rdx, [rbp - 0x40]
movups xmm0, xmmword [rsp + 0x20]
mov rcx, rdi
movups xmm1, xmmword [rsp + 0x30]
movaps xmmword [rbp - 0x40], xmm0
movups xmm0, xmmword [rsp + 0x40]
movaps xmmword [rbp - 0x30], xmm1
movups xmm1, xmmword [rsp + 0x50]
movaps xmmword [rbp - 0x20], xmm0
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp - 0x10], xmm1
movups xmm1, xmmword [rsp + 0x70]
movaps xmmword [rbp], xmm0
movups xmm0, xmmword [rbp - 0x80]
movaps xmmword [rbp + 0x10], xmm1
movups xmm1, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x20], xmm0
movups xmm0, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x30], xmm1
movsd xmm1, qword [rbp - 0x50]
movaps xmmword [rbp + 0x40], xmm0
movsd qword [rbp + 0x50], xmm1
call r8
movss dword [0x1802c9e3c], xmm6
jmp 0x1801aed38
call fcn.18019bf80
mov rcx, rax
call fcn.18019b840
mov rcx, qword [0x1802c9c90]
movaps xmm6, xmmword [rsp + 0x160]
add rcx, 0x33411a8
mov r12, qword [rsp + 0x170]
mov rdi, qword [rsp + 0x178]
mov rsi, qword [rsp + 0x1b0]
cmp rcx, 0x40000
jbe 0x1801aed99
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801aed99
mov rbx, qword [rcx]
add rbx, 0xb8
cmp rbx, 0x40000
jbe 0x1801aed99
lea rax, [rbx + 8]
cmp rax, r14
jae 0x1801aed99
mov rbx, qword [rbx]
jmp 0x1801aed9c
mov rbx, r15
cmp byte [0x1802c9d50], r15b
je 0x1801aedd4
mov ecx, dword [0x1802c9dfc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1801aedd4
lea rcx, [rbx + 0x18]
cmp rcx, 0x40000
jbe 0x1801aedf6
lea rax, [rcx + 4]
cmp rax, r14
jae 0x1801aedf6
mov dword [rcx], 0x41200000
jmp 0x1801aedf6
add rbx, 0x18
cmp rbx, 0x40000
jbe 0x1801aedf6
lea rax, [rbx + 4]
cmp rax, r14
jae 0x1801aedf6
movss xmm0, dword [0x1802a123c]
movss dword [rbx], xmm0
cmp byte [0x1802c9dca], r15b
mov rbx, qword [rsp + 0x1a8]
je 0x1801aee61
call fcn.18019bf80
add rax, 0x610
cmp rax, 0x40000
jbe 0x1801aee61
lea rcx, [rax + 8]
cmp rcx, r14
jae 0x1801aee61
mov rcx, qword [rax]
mov rdx, rcx
lea r8, [rcx + 0xc4]
cmp r8, 0x40000
jbe 0x1801aee45
lea rax, [r8 + 4]
cmp rax, r14
jae 0x1801aee45
mov dword [r8], r15d
lea rcx, [rdx + 0xc8]
cmp rcx, 0x40000
jbe 0x1801aee61
lea rax, [rcx + 4]
cmp rax, r14
jae 0x1801aee61
mov dword [rcx], r15d
cmp byte [0x1802c9dce], r15b
je 0x1801aeea6
call fcn.18019bf80
lea rcx, [rax + 0x820]
cmp rcx, 0x40000
jbe 0x1801aeea6
lea rax, [rcx + 4]
cmp rax, r14
jae 0x1801aee8c
mov edx, dword [rcx]
jmp 0x1801aeea1
cmp rcx, 0x40000
jbe 0x1801aeea6
lea rax, [rcx + 4]
mov edx, r15d
cmp rax, r14
jae 0x1801aeea6
or edx, 4
mov dword [rcx], edx
cmp byte [0x1802c9da7], r15b
je 0x1801aeef1
call fcn.18019bf80
lea rcx, [rax + 0x820]
cmp rcx, 0x40000
jbe 0x1801aeef1
lea rax, [rcx + 4]
cmp rax, r14
jae 0x1801aeed1
mov edx, dword [rcx]
jmp 0x1801aeee6
cmp rcx, 0x40000
jbe 0x1801aeef1
lea rax, [rcx + 4]
mov edx, r15d
cmp rax, r14
jae 0x1801aeef1
mov eax, r15d
cmp edx, 4
sete al
mov dword [rcx], eax
cmp byte [0x1802c9db8], r15b
je 0x1801aef5c
call fcn.18019bf80
mov rcx, qword [0x1802c9c90]
add rcx, 0x32f9ae0
cmp rcx, 0x40000
jbe 0x1801aef5c
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801aef5c
mov rcx, qword [rcx]
add rcx, 0xb8
cmp rcx, 0x40000
jbe 0x1801aef5c
lea rax, [rcx + 8]
cmp rax, r14
jae 0x1801aef5c
mov rcx, qword [rcx]
cmp rcx, 0x40000
jbe 0x1801aef5c
lea rax, [rcx + 4]
cmp rax, r14
jae 0x1801aef5c
movss xmm0, dword [0x1802a11cc]
movss dword [rcx], xmm0
cmp byte [0x1802c9de1], r15b
je 0x1801aefb6
mov ecx, dword [0x1802c9e14]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1801aefb6
call fcn.18019bf80
add rax, 0x828
cmp rax, 0x40000
jbe 0x1801aefb6
lea rcx, [rax + 8]
cmp rcx, r14
jae 0x1801aefb6
mov rcx, qword [rax]
add rcx, 0x38
cmp rcx, 0x40000
jbe 0x1801aefb6
lea rax, [rcx + 0xc]
cmp rax, r14
jae 0x1801aefb6
mov dword [rcx], r15d
mov qword [rcx + 4], 0x3fc00000
add rsp, 0x180
pop r15
pop r14
pop rbp
ret
lea rcx, [0x180300158]
call fcn.18028ad64
cmp dword [0x180300158], 0xffffffff
jne 0x1801aeafe
mov ecx, 0xc566d10
call fcn.180194c10
lea rcx, [0x180300158]
mov qword [0x1802fffd0], rax
call fcn.18028ad04
jmp 0x1801aeafe
lea rcx, [0x1803006fc]
call fcn.18028ad64
cmp dword [0x1803006fc], 0xffffffff
jne 0x1801aebe8
mov ecx, 0x43f29029
call fcn.180194c10
lea rcx, [0x1803006fc]
mov qword [0x180300498], rax
call fcn.18028ad04
jmp 0x1801aebe8