Function at 0x18004eb3c
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rax, qword [0x18018f280]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov r12, rcx
xor r13d, r13d
mov rcx, qword [0x1801963c0]
mov r15, r9
mov rdi, r8
test rcx, rcx
je 0x18004f165
mov rbp, qword [rcx + 0x90]
lea rbx, [rcx + 8]
mov eax, 0x204
lea r9d, [rax + 1]
lea r8d, [rax + 8]
cmp edx, eax
ja 0x18004ef9a
je 0x18004f082
mov eax, 0x104
lea esi, [r13 + 1]
lea r14d, [rax - 4]
cmp edx, eax
ja 0x18004ee62
je 0x18004ee5a
mov eax, edx
sub eax, 7
je 0x18004edda
sub eax, esi
je 0x18004edda
sub eax, 0x18
je 0x18004edbb
sub eax, 0xe0
je 0x18004ec98
sub eax, esi
je 0x18004ec98
cmp eax, esi
jne 0x18004f165
lea rax, [rdi - 1]
cmp rax, 0xfffe
ja 0x18004f165
test di, di
jne 0x18004ec16
cmp word [rbx + 0x37bc], r13w
je 0x18004f165
cmp byte [rbx + 0x37b9], r13b
je 0x18004f165
mov ecx, 0xfc00
movzx eax, di
and ax, cx
mov edx, 0xd800
movzx ecx, word [rbx + 0x37bc]
cmp ax, dx
jne 0x18004ec5d
test cx, cx
je 0x18004ec51
mov edx, 0xfffd
mov rcx, rbx
call fcn.18002b624
mov word [rbx + 0x37bc], di
jmp 0x18004f165
test cx, cx
je 0x18004ec88
mov ecx, 0xdc00
cmp ax, cx
je 0x18004ec7b
mov edx, 0xfffd
mov rcx, rbx
call fcn.18002b624
jmp 0x18004ec80
mov edi, 0xfffd
mov word [rbx + 0x37bc], r13w
movzx edx, di
mov rcx, rbx
call fcn.18002b624
jmp 0x18004f165
cmp edx, r14d
je 0x18004ee5a
mov bpl, r13b
cmp rdi, r14
jae 0x18004f165
lea rbx, [rcx + 8]
mov ecx, send
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov edx, 0x281
and al, sil
mov rcx, rbx
mov r8b, al
call fcn.18002b81c
mov ecx, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov edx, 0x282
and al, sil
mov rcx, rbx
mov r8b, al
call fcn.18002b81c
mov ecx, send
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov edx, 0x283
and al, sil
mov rcx, rbx
mov r8b, al
call fcn.18002b81c
mov ecx, 0x5d
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov edx, 0x284
and al, sil
mov rcx, rbx
mov r8b, al
call fcn.18002b81c
cmp rdi, 0xd
jne 0x18004ed4b
shr r15, 0x10
mov eax, 0x10d
test r14w, r15w
cmovne edi, eax
movsxd rcx, edi
call fcn.18004e5a8
test eax, eax
je 0x18004ed64
mov r8d, edi
mov dl, bpl
mov ecx, eax
call fcn.18004de1c
cmp edi, 0x10
jne 0x18004eee8
mov ebx, 0xa0
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, sil
cmp al, bpl
jne 0x18004ed95
mov r8d, ebx
mov dl, bpl
mov ecx, 0x210
call fcn.18004de1c
mov ebx, 0xa1
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, sil
cmp al, bpl
jne 0x18004f165
mov ecx, 0x214
jmp 0x18004ef8a
cmp r15w, si
jne 0x18004f165
call fcn.18004dd70
test al, al
je 0x18004f165
mov rax, rsi
jmp 0x18004f167
xor eax, eax
lea rbx, [rcx + 0x37d8]
mov ecx, dword [rbx]
cmp edx, 7
mov r8d, dword [rbx + 4]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rax
sete byte [rsp + 0x28]
mov dword [rsp + 0x20], 6
cmp ecx, r8d
jne 0x18004ee33
inc ecx
test r8d, r8d
je 0x18004ee1f
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x18004ee24
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
mov rcx, rbx
call fcn.18003db98
movsxd rax, dword [rbx]
movups xmm0, xmmword [rsp + 0x20]
movsd xmm1, qword [rsp + 0x30]
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 8]
movups xmmword [rax + rcx*8], xmm0
movsd qword [rax + rcx*8 + 0x10], xmm1
add dword [rbx], esi
jmp 0x18004f165
mov bpl, sil
jmp 0x18004eca4
mov eax, edx
sub eax, 0x105
je 0x18004eca1
sub eax, 0xfb
je 0x18004ee93
sub eax, esi
je 0x18004f087
sub eax, esi
je 0x18004f107
cmp eax, esi
je 0x18004f087
jmp 0x18004f165
mov qword [rbp + 8], r12
cmp byte [rbp + 0x10], r13b
jne 0x18004eec9
mov r14d, 2
mov dword [rsp + 0x20], 0x18
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x24], r14d
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x30], r13d
call qword [sym.imp.USER32.dll_TrackMouseEvent]
mov byte [rbp + 0x10], sil
mov rax, r15
shr rax, 0x10
cwde
movd xmm2, eax
movsx eax, r15w
cvtdq2ps xmm2, xmm2
movd xmm1, eax
cvtdq2ps xmm1, xmm1
jmp 0x18004f045
cmp edi, 0x11
jne 0x18004ef38
mov ebx, 0xa2
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, sil
cmp al, bpl
jne 0x18004ef15
mov r8d, ebx
mov dl, bpl
mov ecx, 0x20f
call fcn.18004de1c
mov ebx, 0xa3
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, sil
cmp al, bpl
jne 0x18004f165
mov ecx, 0x213
jmp 0x18004ef8a
cmp edi, 0x12
jne 0x18004f165
mov ebx, 0xa4
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, sil
cmp al, bpl
jne 0x18004ef69
mov r8d, ebx
mov dl, bpl
mov ecx, 0x211
call fcn.18004de1c
mov ebx, 0xa5
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, sil
cmp al, bpl
jne 0x18004f165
mov ecx, 0x215
mov r8d, ebx
mov dl, bpl
call fcn.18004de1c
jmp 0x18004f165
mov eax, 0x20b
cmp edx, eax
ja 0x18004f007
je 0x18004f082
mov eax, edx
sub eax, r9d
je 0x18004f102
sub eax, 1
je 0x18004f082
sub eax, 1
je 0x18004f082
sub eax, 1
je 0x18004f102
sub eax, 1
je 0x18004f082
cmp eax, 1
jne 0x18004f165
shr rdi, 0x10
xorps xmm1, xmm1
movsx eax, di
movd xmm2, eax
cvtdq2ps xmm2, xmm2
divss xmm2, dword [0x180172ba0]
mov rcx, rbx
call fcn.18002b988
jmp 0x18004f165
mov eax, edx
sub eax, r8d
je 0x18004f102
sub eax, 1
je 0x18004f082
sub eax, 1
je 0x18004f064
sub eax, 0xb
je 0x18004f052
cmp eax, 0x8a
jne 0x18004f165
cmp qword [rbp + 8], r12
jne 0x18004f036
mov qword [rbp + 8], r13
movss xmm1, dword [0x180172bf4]
movaps xmm2, xmm1
mov byte [rbp + 0x10], r13b
mov rcx, rbx
call fcn.18002b848
jmp 0x18004f165
cmp edi, 7
jne 0x18004f165
mov byte [rbp + 0x2d], 1
jmp 0x18004f165
shr rdi, 0x10
xorps xmm2, xmm2
movsx eax, di
movd xmm1, eax
cvtdq2ps xmm1, xmm1
divss xmm1, dword [0x180172ba0]
jmp 0x18004effa
mov esi, 1
mov ecx, 0xfffffffd
lea eax, [rdx - 0x201]
and eax, ecx
mov r14d, 2
neg eax
lea eax, [rdx - 0x204]
sbb r15d, r15d
and r15d, r13d
test ecx, eax
lea eax, [rdx - 0x207]
cmove r15d, esi
test ecx, eax
lea eax, [rdx - 0x20b]
cmove r15d, r14d
test ecx, eax
jne 0x18004f0d6
shr rdi, 0x10
mov r15d, r13d
cmp di, si
setne r15b
add r15d, 3
cmp dword [rbp + 0x14], r13d
jne 0x18004f0f0
call qword [sym.imp.USER32.dll_GetCapture]
test rax, rax
jne 0x18004f0f0
mov rcx, r12
call qword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [rbp + 0x14]
mov r8b, sil
bts eax, r15d
mov edx, r15d
mov dword [rbp + 0x14], eax
jmp 0x18004f15d
mov esi, 1
cmp edx, r9d
mov r14d, r13d
sete r14b
cmp edx, 0x208
jne 0x18004f121
mov r14d, 2
jmp 0x18004f138
cmp edx, r8d
jne 0x18004f138
shr rdi, 0x10
mov r14d, r13d
cmp di, si
setne r14b
add r14d, 3
mov eax, dword [rbp + 0x14]
btr eax, r14d
mov dword [rbp + 0x14], eax
test eax, eax
jne 0x18004f157
call qword [sym.imp.USER32.dll_GetCapture]
cmp rax, r12
jne 0x18004f157
call qword [sym.imp.USER32.dll_ReleaseCapture]
xor r8d, r8d
mov edx, r14d
mov rcx, rbx
call fcn.18002b8e4
xor eax, eax
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.18008e310
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret