Function at 0x18009e280
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbx
push rsi
push rdi
sub rsp, 0x100
mov r8d, dword [0x180151b50]
mov rsi, rdx
movaps xmmword [rax - 0x78], xmm11
mov rdi, rcx
movaps xmmword [rax - 0x98], xmm14
xorps xmm14, xmm14
mov qword [rax + 0x18], rbp
mov rax, qword gs:[0x58]
mov ebp, 4
mov rbx, qword [rax + r8*8]
mov eax, dword [rbx + rbp]
cmp dword [0x180154d40], eax
jle 0x18009e302
lea rcx, [0x180154d40]
call fcn.1800d18d8
cmp dword [0x180154d40], 0xffffffff
jne 0x18009e302
lea rcx, [0x180154d40]
mov qword [0x180154d48], 0
mov dword [0x180154d50], 0
call fcn.1800d186c
mov eax, dword [rbx + rbp]
cmp dword [0x180154d54], eax
jle 0x18009e33a
lea rcx, [0x180154d54]
call fcn.1800d18d8
cmp dword [0x180154d54], 0xffffffff
jne 0x18009e33a
lea rcx, [0x1800dbe20]
call fcn.1800d1ef4
lea rcx, [0x180154d54]
call fcn.1800d186c
mov eax, dword [rbx + rbp]
cmp dword [0x180154d58], eax
mov rbp, qword [rsp + 0x130]
jle 0x18009e383
lea rcx, [0x180154d58]
call fcn.1800d18d8
cmp dword [0x180154d58], 0xffffffff
jne 0x18009e383
lea rcx, [0x180154d58]
mov qword [0x180154d60], 0
mov dword [0x180154d68], 0
call fcn.1800d186c
mov rax, qword [rdi + 0x78]
movss xmm11, dword [0x18014f324]
mulss xmm11, dword [0x180136934]
cmp byte [rax], 0
je 0x18009e7a0
movzx eax, byte [0x1801520d5]
test al, al
jne 0x18009e7a0
cmp byte [0x1801521bb], al
jne 0x18009e3e1
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x18009e3e1
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x38], 0x64
call fcn.18008e7b0
jmp 0x18009e67a
cmp byte [0x1801521ba], 0
je 0x18009e45e
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18009e45e
mov rcx, qword [rdi + 0x180]
lea rdx, [rsp + 0x48]
call fcn.18009a310
cmp qword [rax + 0x18], 0xf
mov r8, qword [rax + 0x10]
jbe 0x18009e419
mov rax, qword [rax]
cmp r8, 5
jne 0x18009e454
lea rdx, str.BLOCK
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18009e454
lea rcx, [rsp + 0x48]
call fcn.180065e60
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x38], 0x32
call fcn.18008e7b0
jmp 0x18009e67a
lea rcx, [rsp + 0x48]
call fcn.180065e60
cmp byte [0x1801521b8], 0
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm8
movss xmm8, dword [0x1801369f8]
movaps xmmword [rsp + 0xc0], xmm9
movss xmm9, dword [0x180136a0c]
movaps xmmword [rsp + 0xb0], xmm10
movaps xmmword [rsp + 0x90], xmm12
movss xmm12, dword [0x180136c80]
je 0x18009e5b6
mov rcx, qword [0x1801521a8]
test rcx, rcx
je 0x18009e5b6
lea rdx, [rsp + 0x38]
call fcn.180091af0
movsd xmm0, qword [rax]
movsd qword [0x180154d60], xmm0
mov ecx, dword [rax + 8]
movss xmm6, dword [0x180154d60]
mov dword [0x180154d68], ecx
mov rbx, qword [rsi]
movd xmm10, ecx
subss xmm10, dword [rbx + 0x2c]
subss xmm6, dword [rbx + 0x24]
movaps xmm0, xmm10
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movss xmm2, dword [rbx + 0x48]
movaps xmm1, xmm9
mulss xmm0, xmm8
divss xmm0, dword [0x180136938]
subss xmm0, dword [0x1801369c8]
subss xmm2, xmm0
xorps xmm2, xmm12
addss xmm2, xmm8
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
comiss xmm14, xmm0
jbe 0x18009e54e
addss xmm0, xmm9
movd xmm1, dword [0x18014f32c]
subss xmm0, xmm8
cvtdq2ps xmm1, xmm1
andps xmm0, xmmword [0x180136c50]
comiss xmm1, xmm0
jb 0x18009e5b6
movss xmm7, dword [0x180154d64]
movaps xmm0, xmm7
mulss xmm6, xmm6
subss xmm0, dword [rbx + 0x28]
mulss xmm10, xmm10
mulss xmm0, xmm0
addss xmm6, xmm0
xorps xmm0, xmm0
addss xmm6, xmm10
ucomiss xmm0, xmm6
ja 0x18009e5a1
xorps xmm0, xmm0
sqrtss xmm0, xmm6
jmp 0x18009e5a9
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm1, dword [0x18014f328]
comiss xmm1, xmm0
jae 0x18009e5d1
lea rcx, [rdi - 8]
mov r9, rsi
lea r8, [0x180154d60]
call fcn.18009e7c0
movss xmm7, dword [0x180154d64]
cmp qword [0x1801521a8], 0
je 0x18009e633
cmp dword [0x18014f318], 1
jne 0x18009e5f4
addss xmm7, dword [0x1801368f0]
movss dword [0x180154d64], xmm7
lea rax, [rsp + 0x30]
mov byte [rsp + 0x30], 1
lea r9, [0x180154d60]
mov qword [rsp + 0x20], rax
mov r8, rsi
lea rdx, [rsp + 0x68]
call fcn.18009f840
cmp byte [rsp + 0x30], 0
movsd xmm0, qword [rax]
movsd qword [0x180154d48], xmm0
mov ecx, dword [rax + 8]
mov dword [0x180154d50], ecx
jne 0x18009e693
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x38], 0xa
call fcn.18008e7b0
movaps xmm10, xmmword [rsp + 0xb0]
movaps xmm9, xmmword [rsp + 0xc0]
movaps xmm8, xmmword [rsp + 0xd0]
movaps xmm7, xmmword [rsp + 0xe0]
movaps xmm6, xmmword [rsp + 0xf0]
movaps xmm12, xmmword [rsp + 0x90]
lea r11, [rsp + 0x100]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm14, xmmword [r11 - 0x80]
mov rsp, r11
pop rdi
pop rsi
pop rbx
ret
mov rbx, qword [rsi]
movss xmm6, dword [0x180154d48]
movss xmm10, dword [0x180154d4c]
movd xmm7, ecx
subss xmm6, dword [rbx + 0x24]
subss xmm7, dword [rbx + 0x2c]
subss xmm10, dword [rbx + 0x28]
movaps xmm0, xmm6
mulss xmm0, xmm6
movaps xmm1, xmm7
mulss xmm1, xmm7
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x18009e6de
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x18009e6e6
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm1, xmm0
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movaps xmm10, xmm0
movaps xmm1, xmm6
xorps xmm10, xmm12
movaps xmm0, xmm7
mulss xmm10, xmm8
divss xmm10, dword [0x180136938]
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movss xmm2, dword [rbx + 0x48]
movaps xmm1, xmm9
mulss xmm0, xmm8
divss xmm0, dword [0x180136938]
subss xmm0, dword [0x1801369c8]
subss xmm2, xmm0
xorps xmm2, xmm12
addss xmm2, xmm8
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movaps xmm6, xmm0
comiss xmm14, xmm6
jbe 0x18009e754
addss xmm6, xmm9
movss xmm0, dword [rbx + 0x44]
subss xmm6, xmm8
subss xmm0, xmm10
movaps xmm1, xmm9
xorps xmm0, xmm12
addss xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
comiss xmm14, xmm0
jbe 0x18009e780
addss xmm0, xmm9
subss xmm0, xmm8
movss dword [rsp + 0x20], xmm11
lea rcx, [rdi - 8]
movaps xmm2, xmm6
movaps xmm3, xmm0
call fcn.18009ef30
jmp 0x18009e646
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x38], 0xfa
call fcn.18008e7b0
jmp 0x18009e67a