Function at 0x18004c3e0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x90
mov rax, qword [0x1801095b0]
mov rcx, qword [rax + 0x10]
mov rax, qword [0x1801094d0]
mov rdi, qword [rcx]
cmp byte [rax + 0x127], 0
je 0x18004c420
test rdi, rdi
je 0x18004c420
mov rax, qword [rdi + 8]
test rax, rax
je 0x18004c420
mov byte [rax + 0x189], 1
mov rax, qword [0x1801094d0]
mov qword [rsp + 0xa8], rbx
lea rbx, [rdi + 8]
cmp byte [rax + 0x12c], 0
je 0x18004c46b
test rdi, rdi
je 0x18004c4a1
mov rdx, qword [rbx]
test rdx, rdx
je 0x18004c4a1
mov rcx, qword [0x1801095a0]
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x18004c4a8
mov rax, qword [rcx + 8]
mov dword [r8 + rax], 0x41700000
jmp 0x18004c4a1
test rdi, rdi
je 0x18004c4a1
mov r8, qword [rdi + 8]
test r8, r8
je 0x18004c4a1
mov rcx, qword [0x1801095a0]
lea rbx, [rdi + 8]
mov rax, qword [rcx + 0x38]
mov r9, qword [r8 + rax]
test r9, r9
je 0x18004c4a8
mov rax, qword [rcx + 8]
lea rbx, [rdi + 8]
mov dword [r9 + rax], 0x3f800000
mov rcx, qword [0x1801095a0]
mov rax, qword [0x1801094d0]
cmp byte [rax + 0x129], 0
je 0x18004c4e5
test rdi, rdi
je 0x18004c4e5
mov rdx, qword [rbx]
test rdx, rdx
je 0x18004c4e5
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x18004c4e5
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x2c000
mov rcx, qword [0x1801095a0]
mov rax, qword [0x1801094d0]
cmp byte [rax + 0x126], 0
je 0x18004c522
test rdi, rdi
je 0x18004c522
mov rdx, qword [rbx]
test rdx, rdx
je 0x18004c522
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x18004c522
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x16000
mov rcx, qword [0x1801095a0]
mov rax, qword [0x1801094d0]
cmp byte [rax + 0x17c], 0
je 0x18004c55f
test rdi, rdi
je 0x18004c55f
mov rdx, qword [rbx]
test rdx, rdx
je 0x18004c55f
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x18004c55f
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x5800
mov rcx, qword [0x1801095a0]
mov rax, qword [0x1801094d0]
cmp byte [rax + 0x17d], 0
je 0x18004c59c
test rdi, rdi
je 0x18004c59c
mov rdx, qword [rbx]
test rdx, rdx
je 0x18004c59c
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x18004c59c
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0xb000
mov rcx, qword [0x1801095a0]
mov rax, qword [0x1801094d0]
cmp byte [rax + 0x125], 0
je 0x18004c5d2
test rdi, rdi
je 0x18004c5d2
mov rdx, qword [rbx]
test rdx, rdx
je 0x18004c5d2
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x18004c5d2
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 2
mov rax, qword [0x1801094d0]
cmp byte [rax + 0x128], 0
je 0x18004c624
test rdi, rdi
je 0x18004c664
mov rax, qword [rbx]
test rax, rax
je 0x18004c664
mov rax, qword [rax + 0x30]
test rax, rax
je 0x18004c664
mov rax, qword [rax + 0x10]
test rax, rax
je 0x18004c664
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x18004c664
mov rax, qword [rcx + 0x70]
test rax, rax
je 0x18004c664
mov rax, qword [rax]
test rax, rax
je 0x18004c664
mov dword [rax + 0x2c], 0xbf800000
jmp 0x18004c664
test rdi, rdi
je 0x18004c664
mov rax, qword [rbx]
test rax, rax
je 0x18004c664
mov rax, qword [rax + 0x30]
test rax, rax
je 0x18004c664
mov rax, qword [rax + 0x10]
test rax, rax
je 0x18004c664
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x18004c664
mov rax, qword [rcx + 0x70]
test rax, rax
je 0x18004c664
mov rax, qword [rax]
test rax, rax
je 0x18004c664
mov dword [rax + 0x2c], 0x3e800000
mov rax, qword [0x1801094d0]
cmp byte [rax + 0x124], 0
je 0x18004c6c2
mov rax, qword [0x1801095b0]
mov rax, qword [rax + 0x30]
test rax, rax
je 0x18004c689
mov rax, qword [rax]
jmp 0x18004c691
mov rax, qword [rsp + 0xa0]
test rax, rax
je 0x18004c6c2
test rdi, rdi
je 0x18004c6c2
mov rcx, qword [rbx]
test rcx, rcx
je 0x18004c6c2
mov rcx, qword [rcx + 0x30]
test rcx, rcx
je 0x18004c6c2
movsd xmm0, qword [rax + 0x3d0]
movsd qword [rcx + 0x30], xmm0
mov eax, dword [rax + 0x3d8]
mov dword [rcx + 0x38], eax
mov rax, qword [0x1801094d0]
mov qword [rsp + 0xb8], rsi
cmp byte [rax + 0x12a], 0
je 0x18004c716
cmp byte [0x180109341], 0
jne 0x18004c716
mov rcx, qword [0x1801095b0]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rcx + 0x88]
mov rdx, qword [rax]
mov rax, qword [rcx + 0x60]
test rdx, rdx
jne 0x18004c705
xor ecx, ecx
jmp 0x18004c709
mov rcx, qword [rdx + 8]
call rax
mov ecx, eax
call rsi
mov byte [0x180109341], 1
mov rcx, qword [0x1801094d0]
cmp byte [rcx + 0x12b], 0
je 0x18004ca10
mov ecx, dword [rcx + 0x120]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18004c74c
cmp byte [0x180109342], 0
sete al
mov byte [0x180109342], al
jmp 0x18004c753
movzx eax, byte [0x180109342]
test al, al
je 0x18004ca29
mov rax, qword [0x1801095b0]
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x18004c770
mov r8, qword [rcx]
jmp 0x18004c778
mov r8, qword [rsp + 0xa0]
test r8, r8
je 0x18004ca10
mov qword [rsp + 0xb0], rbp
movaps xmmword [rsp + 0x80], xmm6
xorps xmm6, xmm6
movaps xmmword [rsp + 0x40], xmm10
movaps xmmword [rsp + 0x30], xmm11
movaps xmmword [rsp + 0x70], xmm7
movaps xmmword [rsp + 0x60], xmm8
movaps xmmword [rsp + 0x50], xmm9
test rdi, rdi
je 0x18004c86f
mov rax, qword [rbx]
test rax, rax
je 0x18004c7d2
mov rcx, qword [rax + 0x30]
xorps xmm0, xmm0
test rcx, rcx
je 0x18004c7d2
movups xmmword [rcx + 0x30], xmm0
mov rcx, qword [rbx]
test rcx, rcx
je 0x18004c7f7
mov rdx, qword [0x1801095a0]
mov rax, qword [rdx + 0x38]
mov rcx, qword [rcx + rax]
mov rax, qword [rdx + 0x10]
mov qword [rcx + rax], 2
jmp 0x18004c80e
mov rax, qword [0x1801095a0]
mov rcx, qword [rax + 0x10]
mov qword [rcx], 2
test rdi, rdi
je 0x18004c881
mov rcx, qword [rbx]
test rcx, rcx
je 0x18004c838
mov byte [rcx + 0x2c], 0x25
mov rcx, qword [rbx]
test rcx, rcx
je 0x18004c838
xorps xmm0, xmm0
unpcklps xmm0, xmm6
movsd qword [rcx + 0x320], xmm0
movss dword [rcx + 0x328], xmm6
test rdi, rdi
je 0x18004c881
mov rsi, qword [rbx]
test rsi, rsi
je 0x18004c881
movsd xmm7, qword [rsi + 0x90]
mov esi, dword [rsi + 0x98]
movaps xmm8, xmm7
movsd qword [rsp + 0x20], xmm7
movss xmm9, dword [rsp + 0x20]
shufps xmm8, xmm8, 0x55
movd xmm6, esi
jmp 0x18004c894
mov rax, qword [0x1801095a0]
mov rcx, qword [rax + 0x10]
mov qword [rcx], 2
xorps xmm8, xmm8
movd esi, xmm6
xorps xmm7, xmm7
xorps xmm9, xmm9
unpcklps xmm7, xmm8
movsd xmm0, qword [r8 + 0x3d0]
mov ecx, reloc.WS2_32.dll_recv
mov ebp, dword [r8 + 0x3d8]
movsd qword [rsp + 0x20], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18004c8c4
movss xmm0, dword [0x1800f74c8]
jmp 0x18004c8cc
movss xmm0, dword [0x1800f7444]
mov ecx, 0x57
movss dword [0x1801080b8], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm11, dword [rsp + 0x24]
movd xmm10, ebp
mov rbp, qword [rsp + 0xb0]
test ax, ax
jns 0x18004c936
movss xmm2, dword [0x1801080b8]
movaps xmm1, xmm11
movaps xmm0, xmm2
mulss xmm1, xmm2
mulss xmm0, dword [rsp + 0x20]
addss xmm8, xmm1
addss xmm9, xmm0
movaps xmm0, xmm10
mulss xmm0, xmm2
addss xmm6, xmm0
movaps xmm7, xmm9
unpcklps xmm7, xmm8
movaps xmm7, xmm7
movd esi, xmm6
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18004c97f
movss xmm1, dword [0x1801080b8]
movaps xmm0, xmm1
mulss xmm11, xmm1
mulss xmm0, dword [rsp + 0x20]
mulss xmm10, xmm1
subss xmm8, xmm11
subss xmm9, xmm0
subss xmm6, xmm10
movaps xmm7, xmm9
unpcklps xmm7, xmm8
movaps xmm7, xmm7
movd esi, xmm6
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movaps xmm11, xmmword [rsp + 0x30]
movaps xmm10, xmmword [rsp + 0x40]
movaps xmm9, xmmword [rsp + 0x50]
movaps xmm8, xmmword [rsp + 0x60]
test ax, ax
jns 0x18004c9b3
addss xmm6, dword [0x1801080b8]
movd esi, xmm6
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18004c9cf
subss xmm6, dword [0x1801080b8]
movd esi, xmm6
movaps xmm6, xmmword [rsp + 0x80]
test rdi, rdi
je 0x18004ca0b
mov rax, qword [rbx]
test rax, rax
je 0x18004ca0b
movsd qword [rax + 0x90], xmm7
mov dword [rax + 0x98], esi
mov rax, qword [rbx]
test rax, rax
je 0x18004ca0b
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x18004ca0b
movsd qword [rcx + 0x50], xmm7
mov dword [rcx + 0x58], esi
movaps xmm7, xmmword [rsp + 0x70]
mov rsi, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xa8]
add rsp, 0x90
pop rdi
ret
mov rdx, qword [0x1801095a0]
test rdi, rdi
je 0x18004ca53
mov rcx, qword [rbx]
test rcx, rcx
je 0x18004ca53
mov rax, qword [rdx + 0x38]
mov rcx, qword [rcx + rax]
mov rax, qword [rdx + 0x10]
mov qword [rcx + rax], 0
jmp 0x18004ca10
mov rax, qword [rdx + 0x10]
xor ecx, ecx
mov qword [rcx + rax], rcx
jmp 0x18004ca10