Function at 0x1800086b0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
lea rbp, [rsp - 0x2c0]
sub rsp, 0x3c0
mov rax, qword [0x1802ae740]
xor rax, rsp
mov qword [rbp + 0x200], rax
cmp byte [0x1802afec0], 0
je 0x180008ddf
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x1802ec848]
cmp rax, qword [rcx]
jne 0x180008ddf
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x180008ddf
mov qword [rsp + 0x3d0], rbx
mov qword [rsp + 0x3b8], r12
mov qword [rsp + 0x3b0], r13
mov r13d, 1
cmp qword [0x1802ec120], r13
jne 0x18000875e
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x1802ec848]
cmp rax, qword [rcx]
jne 0x18000875e
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18000875e
call fcn.180007ab0
mov ecx, eax
xor edx, edx
call fcn.180007b10
mov dword [rbp + 0x1a0], 0xa
call fcn.180007ae0
mov ecx, eax
lea rdx, [rbp + 0x1a0]
call fcn.180007a30
xor ebx, ebx
movsxd r12, eax
test eax, eax
jle 0x180008dc7
mov qword [rsp + 0x3d8], rsi
mov qword [rsp + 0x3e0], rdi
mov qword [rsp + 0x3a8], r14
mov qword [rsp + 0x3a0], r15
lea r15, [rbp + 0x1a8]
movaps xmmword [rsp + 0x390], xmm6
movaps xmmword [rsp + 0x380], xmm7
movaps xmmword [rsp + 0x370], xmm8
movaps xmmword [rsp + 0x360], xmm9
movaps xmmword [rsp + 0x350], xmm10
movaps xmmword [rsp + 0x340], xmm11
movaps xmmword [rsp + 0x330], xmm12
movaps xmmword [rsp + 0x320], xmm13
xorps xmm13, xmm13
movaps xmmword [rsp + 0x310], xmm14
movss xmm14, dword [0x180278ea8]
nop dword [rax + rax]
mov ecx, dword [r15]
test ecx, ecx
je 0x180008d4b
call fcn.180007430
test eax, eax
je 0x180008d4b
mov r14d, 4
nop
mov edi, dword [r15]
lea rcx, [rsp + 0x78]
mov edx, edi
mov r8d, r13d
call fcn.1800074f0
call fcn.180007ae0
mov edx, eax
movss dword [rsp + 0x28], xmm13
movaps xmm3, xmm13
lea rcx, [rbp - 0x68]
mov r8d, 0x796e
call fcn.180007960
movaps xmm3, xmm13
movss dword [rsp + 0x28], xmm13
mov r8d, 0x796e
lea rcx, [rbp - 0x38]
mov edx, edi
call fcn.180007960
call fcn.180007ae0
mov edx, eax
lea rcx, [rbp - 0x50]
mov r8d, r13d
call fcn.1800074f0
test ebx, ebx
je 0x180008945
mov r8d, r13d
lea rcx, [rbp - 0x38]
mov edx, ebx
call fcn.1800074f0
mov r8d, r13d
lea rcx, [rbp - 8]
mov edx, ebx
movss xmm12, dword [rax + 0x10]
call fcn.1800074f0
mov r8d, r13d
lea rcx, [rbp - 0x20]
mov edx, ebx
movss xmm11, dword [rax + 8]
call fcn.1800074f0
movss xmm1, dword [rbp - 0x80]
movss xmm0, dword [rbp - 0x78]
movss xmm9, dword [rbp - 0x40]
movss xmm8, dword [rbp - 0x48]
movaps xmm2, xmm9
movss xmm6, dword [rbp - 0x50]
movss xmm3, dword [rsp + 0x78]
movss xmm10, dword [rax]
movss dword [rsp + 0x28], xmm0
movaps xmm0, xmm6
movss dword [rsp + 0x20], xmm1
movaps xmm1, xmm8
call fcn.180007680
movaps xmm7, xmm0
movss dword [rsp + 0x28], xmm12
movaps xmm0, xmm6
movss dword [rsp + 0x20], xmm11
movaps xmm3, xmm10
movaps xmm2, xmm9
movaps xmm1, xmm8
call fcn.180007680
comiss xmm7, xmm0
jb 0x180008945
cmp qword [0x1802af370], r13
jne 0x180008947
mov ebx, edi
call fcn.180007ae0
mov ecx, eax
lea rdx, [rsp + 0x70]
movzx r8d, r13b
call fcn.180007b60
mov ecx, dword [rsp + 0x70]
call fcn.180007be0
test eax, eax
je 0x180008d42
mov r8d, r13d
lea rcx, [rbp - 0x20]
mov edx, ebx
call fcn.1800074f0
mov r8d, r13d
lea rcx, [rbp - 8]
mov edx, ebx
movss xmm7, dword [rax + 0x10]
call fcn.1800074f0
mov r8d, r13d
lea rcx, [rbp - 0x38]
mov edx, ebx
movss xmm6, dword [rax + 8]
call fcn.1800074f0
lea rcx, [rbp - 0x70]
movaps xmm2, xmm7
lea r9, [rbp - 0x6c]
mov qword [rsp + 0x20], rcx
movaps xmm1, xmm6
movss xmm0, dword [rax]
call fcn.1800075c0
cmp qword [0x1802ec120], 0
mov esi, eax
mov rcx, qword [0x1802af378]
cmove esi, r13d
test rcx, rcx
je 0x1800089ed
cmp rcx, r13
jne 0x1800089fc
mov ecx, edi
call fcn.180007920
test eax, eax
jne 0x180008d42
jmp 0x1800089fc
mov ecx, edi
call fcn.180007920
test eax, eax
je 0x180008d42
call fcn.180007ab0
mov ecx, eax
xor edx, edx
call fcn.180007b10
movdqa xmm0, xmmword [0x1802791e0]
movdqa xmm1, xmmword [0x180279190]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm0, xmmword [0x180279180]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm1, xmmword [0x1802790f0]
movdqa xmmword [rbp + 0x30], xmm0
movdqa xmm0, xmmword [0x180279110]
movdqa xmmword [rbp + 0x40], xmm1
movdqa xmm1, xmmword [0x180279210]
movdqa xmmword [rbp + 0x50], xmm0
movdqa xmm0, xmmword [0x180279120]
movdqa xmmword [rbp + 0x60], xmm1
movdqa xmm1, xmmword [0x1802790b0]
movdqa xmmword [rbp + 0x70], xmm0
movdqa xmm0, xmmword [0x1802790c0]
movdqa xmmword [rbp + 0x80], xmm1
movdqa xmm1, xmmword [0x180279130]
movdqa xmmword [rbp + 0x90], xmm0
movdqa xmm0, xmmword [0x180279150]
movdqa xmmword [rbp + 0xa0], xmm1
movdqa xmm1, xmmword [0x1802790e0]
movdqa xmmword [rbp + 0xb0], xmm0
movdqa xmm0, xmmword [0x1802791b0]
movdqa xmmword [rbp + 0xc0], xmm1
movdqa xmm1, xmmword [0x1802791f0]
movdqa xmmword [rbp + 0xd0], xmm0
movdqa xmm0, xmmword [0x180279200]
movdqa xmmword [rbp + 0xe0], xmm1
movdqa xmm1, xmmword [0x1802791c0]
movdqa xmmword [rbp + 0xf0], xmm0
movdqa xmm0, xmmword [0x1802790d0]
movdqa xmmword [rbp + 0x100], xmm1
movdqa xmm1, xmmword [0x180279160]
movdqa xmmword [rbp + 0x110], xmm0
movdqa xmm0, xmmword [0x1802791a0]
movdqa xmmword [rbp + 0x120], xmm1
movdqa xmm1, xmmword [0x180279140]
movdqa xmmword [rbp + 0x130], xmm0
movdqa xmm0, xmmword [0x1802790a0]
movdqa xmmword [rbp + 0x140], xmm1
movdqa xmm1, xmmword [0x1802791d0]
movdqa xmmword [rbp + 0x150], xmm0
movdqa xmm0, xmmword [0x180279100]
movdqa xmmword [rbp + 0x160], xmm1
movdqa xmm1, xmmword [0x180279170]
movdqa xmmword [rbp + 0x170], xmm0
movdqa xmmword [rbp + 0x180], xmm1
mov dword [rbp + 0x190], 0x8b93
mov dword [rbp + 0x194], 0xdd1c
test ebx, ebx
je 0x180008b9e
xor edx, edx
mov ecx, ebx
call fcn.180007560
test eax, eax
jne 0x180008b9e
test esi, esi
jne 0x180008bab
cmp qword [0x1802af370], r13
jne 0x180008d42
call fcn.180007ae0
mov ecx, eax
mov r8d, 0x3e8
mov edx, ebx
call fcn.180007470
test eax, eax
je 0x180008d42
movaps xmm3, xmm13
movss dword [rsp + 0x28], xmm13
mov r8d, 0x796e
lea rcx, [rsp + 0x78]
mov edx, ebx
call fcn.180007960
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x1802ec848]
cmp rax, qword [rcx]
jne 0x180008d42
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x180008d42
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1802afec4]
mov r8d, r13d
test ecx, ecx
cmovg r8d, ecx
xor edx, edx
div r8d
test edx, edx
jne 0x180008d42
cmp byte [0x1802afec1], dl
je 0x180008ce3
movss xmm8, dword [rbp - 0x78]
lea rdi, [rbp + 0x10]
movss xmm9, dword [rbp - 0x80]
movss xmm10, dword [rsp + 0x78]
mov r8d, dword [rdi]
lea rcx, [rbp - 0x20]
movaps xmm3, xmm13
movss dword [rsp + 0x28], xmm13
mov edx, ebx
call fcn.180007960
movups xmm7, xmmword [rax]
movsd xmm6, qword [rax + 0x10]
call fcn.180007ae0
movss dword [rsp + 0x60], xmm14
movaps xmm0, xmm7
mov dword [rsp + 0x58], r13d
movaps xmm3, xmm7
mov dword [rsp + 0x50], r13d
movaps xmm2, xmm8
mov dword [rsp + 0x48], eax
movaps xmm1, xmm9
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], r13d
shufps xmm0, xmm7, 0xaa
mov dword [rsp + 0x30], 0x32
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm10
movsd qword [rbp - 0x58], xmm6
call fcn.180007780
lea rax, [rbp + 0x198]
add rdi, 4
cmp rdi, rax
jne 0x180008c51
jmp 0x180008d42
call fcn.180007ae0
movss xmm0, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x80]
movss xmm3, dword [rsp + 0x78]
movss xmm2, dword [rbp - 0x58]
movss dword [rsp + 0x60], xmm14
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], r13d
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], 0x32
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [rbp - 0x68]
movss dword [rsp + 0x20], xmm1
movss xmm1, dword [rbp - 0x60]
call fcn.180007780
sub r14, r13
jne 0x180008830
add r15, 8
sub r12, r13
jne 0x180008810
movaps xmm14, xmmword [rsp + 0x310]
movaps xmm13, xmmword [rsp + 0x320]
movaps xmm12, xmmword [rsp + 0x330]
movaps xmm11, xmmword [rsp + 0x340]
movaps xmm10, xmmword [rsp + 0x350]
movaps xmm9, xmmword [rsp + 0x360]
movaps xmm8, xmmword [rsp + 0x370]
movaps xmm7, xmmword [rsp + 0x380]
movaps xmm6, xmmword [rsp + 0x390]
mov r15, qword [rsp + 0x3a0]
mov r14, qword [rsp + 0x3a8]
mov rdi, qword [rsp + 0x3e0]
mov rsi, qword [rsp + 0x3d8]
mov r12, qword [rsp + 0x3b8]
mov rbx, qword [rsp + 0x3d0]
mov r13, qword [rsp + 0x3b0]
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.1801942d0
add rsp, 0x3c0
pop rbp
ret