Function at 0x180049740
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x90
mov rax, qword [0x1800f4540]
mov rcx, qword [rax + 0x10]
mov rax, qword [0x1800f4420]
mov rdi, qword [rcx]
cmp byte [rax + 0x127], 0
je 0x180049780
test rdi, rdi
je 0x180049780
mov rax, qword [rdi + 8]
test rax, rax
je 0x180049780
mov byte [rax + 0x189], 1
mov rax, qword [0x1800f4420]
mov qword [rsp + 0xa8], rbx
lea rbx, [rdi + 8]
cmp byte [rax + 0x12c], 0
je 0x1800497cb
test rdi, rdi
je 0x180049801
mov rdx, qword [rbx]
test rdx, rdx
je 0x180049801
mov rcx, qword [0x1800f4530]
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180049808
mov rax, qword [rcx + 8]
mov dword [r8 + rax], 0x41700000
jmp 0x180049801
test rdi, rdi
je 0x180049801
mov r8, qword [rdi + 8]
test r8, r8
je 0x180049801
mov rcx, qword [0x1800f4530]
lea rbx, [rdi + 8]
mov rax, qword [rcx + 0x38]
mov r9, qword [r8 + rax]
test r9, r9
je 0x180049808
mov rax, qword [rcx + 8]
lea rbx, [rdi + 8]
mov dword [r9 + rax], 0x3f800000
mov rcx, qword [0x1800f4530]
mov rax, qword [0x1800f4420]
cmp byte [rax + 0x129], 0
je 0x180049845
test rdi, rdi
je 0x180049845
mov rdx, qword [rbx]
test rdx, rdx
je 0x180049845
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180049845
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x2c000
mov rcx, qword [0x1800f4530]
mov rax, qword [0x1800f4420]
cmp byte [rax + 0x126], 0
je 0x180049882
test rdi, rdi
je 0x180049882
mov rdx, qword [rbx]
test rdx, rdx
je 0x180049882
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180049882
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x16000
mov rcx, qword [0x1800f4530]
mov rax, qword [0x1800f4420]
cmp byte [rax + 0x17c], 0
je 0x1800498bf
test rdi, rdi
je 0x1800498bf
mov rdx, qword [rbx]
test rdx, rdx
je 0x1800498bf
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x1800498bf
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x5800
mov rcx, qword [0x1800f4530]
mov rax, qword [0x1800f4420]
cmp byte [rax + 0x17d], 0
je 0x1800498fc
test rdi, rdi
je 0x1800498fc
mov rdx, qword [rbx]
test rdx, rdx
je 0x1800498fc
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x1800498fc
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0xb000
mov rcx, qword [0x1800f4530]
mov rax, qword [0x1800f4420]
cmp byte [rax + 0x125], 0
je 0x180049932
test rdi, rdi
je 0x180049932
mov rdx, qword [rbx]
test rdx, rdx
je 0x180049932
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180049932
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 2
mov rax, qword [0x1800f4420]
cmp byte [rax + 0x128], 0
je 0x180049984
test rdi, rdi
je 0x1800499c4
mov rax, qword [rbx]
test rax, rax
je 0x1800499c4
mov rax, qword [rax + 0x30]
test rax, rax
je 0x1800499c4
mov rax, qword [rax + 0x10]
test rax, rax
je 0x1800499c4
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x1800499c4
mov rax, qword [rcx + 0x70]
test rax, rax
je 0x1800499c4
mov rax, qword [rax]
test rax, rax
je 0x1800499c4
mov dword [rax + 0x2c], 0xbf800000
jmp 0x1800499c4
test rdi, rdi
je 0x1800499c4
mov rax, qword [rbx]
test rax, rax
je 0x1800499c4
mov rax, qword [rax + 0x30]
test rax, rax
je 0x1800499c4
mov rax, qword [rax + 0x10]
test rax, rax
je 0x1800499c4
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x1800499c4
mov rax, qword [rcx + 0x70]
test rax, rax
je 0x1800499c4
mov rax, qword [rax]
test rax, rax
je 0x1800499c4
mov dword [rax + 0x2c], 0x3e800000
mov rax, qword [0x1800f4420]
cmp byte [rax + 0x124], 0
je 0x180049a22
mov rax, qword [0x1800f4540]
mov rax, qword [rax + 0x30]
test rax, rax
je 0x1800499e9
mov rax, qword [rax]
jmp 0x1800499f1
mov rax, qword [rsp + 0xa0]
test rax, rax
je 0x180049a22
test rdi, rdi
je 0x180049a22
mov rcx, qword [rbx]
test rcx, rcx
je 0x180049a22
mov rcx, qword [rcx + 0x30]
test rcx, rcx
je 0x180049a22
movsd xmm0, qword [rax + 0x3d0]
movsd qword [rcx + 0x30], xmm0
mov eax, dword [rax + 0x3d8]
mov dword [rcx + 0x38], eax
mov rax, qword [0x1800f4420]
mov qword [rsp + 0xb8], rsi
cmp byte [rax + 0x12a], 0
je 0x180049a76
cmp byte [0x1800f4381], 0
jne 0x180049a76
mov rcx, qword [0x1800f4540]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rcx + 0x88]
mov rdx, qword [rax]
mov rax, qword [rcx + 0x60]
test rdx, rdx
jne 0x180049a65
xor ecx, ecx
jmp 0x180049a69
mov rcx, qword [rdx + 8]
call rax
mov ecx, eax
call rsi
mov byte [0x1800f4381], 1
mov rcx, qword [0x1800f4420]
cmp byte [rcx + 0x12b], 0
je 0x180049d70
mov ecx, dword [rcx + 0x120]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180049aac
cmp byte [0x1800f4382], 0
sete al
mov byte [0x1800f4382], al
jmp 0x180049ab3
movzx eax, byte [0x1800f4382]
test al, al
je 0x180049d89
mov rax, qword [0x1800f4540]
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x180049ad0
mov r8, qword [rcx]
jmp 0x180049ad8
mov r8, qword [rsp + 0xa0]
test r8, r8
je 0x180049d70
mov qword [rsp + 0xb0], rbp
movaps xmmword [rsp + 0x80], xmm6
xorps xmm6, xmm6
movaps xmmword [rsp + 0x40], xmm10
movaps xmmword [rsp + 0x30], xmm11
movaps xmmword [rsp + 0x70], xmm7
movaps xmmword [rsp + 0x60], xmm8
movaps xmmword [rsp + 0x50], xmm9
test rdi, rdi
je 0x180049bcf
mov rax, qword [rbx]
test rax, rax
je 0x180049b32
mov rcx, qword [rax + 0x30]
xorps xmm0, xmm0
test rcx, rcx
je 0x180049b32
movups xmmword [rcx + 0x30], xmm0
mov rcx, qword [rbx]
test rcx, rcx
je 0x180049b57
mov rdx, qword [0x1800f4530]
mov rax, qword [rdx + 0x38]
mov rcx, qword [rcx + rax]
mov rax, qword [rdx + 0x10]
mov qword [rcx + rax], 2
jmp 0x180049b6e
mov rax, qword [0x1800f4530]
mov rcx, qword [rax + 0x10]
mov qword [rcx], 2
test rdi, rdi
je 0x180049be1
mov rcx, qword [rbx]
test rcx, rcx
je 0x180049b98
mov byte [rcx + 0x2c], 0x25
mov rcx, qword [rbx]
test rcx, rcx
je 0x180049b98
xorps xmm0, xmm0
unpcklps xmm0, xmm6
movsd qword [rcx + 0x320], xmm0
movss dword [rcx + 0x328], xmm6
test rdi, rdi
je 0x180049be1
mov rsi, qword [rbx]
test rsi, rsi
je 0x180049be1
movsd xmm7, qword [rsi + 0x90]
mov esi, dword [rsi + 0x98]
movaps xmm8, xmm7
movsd qword [rsp + 0x20], xmm7
movss xmm9, dword [rsp + 0x20]
shufps xmm8, xmm8, 0x55
movd xmm6, esi
jmp 0x180049bf4
mov rax, qword [0x1800f4530]
mov rcx, qword [rax + 0x10]
mov qword [rcx], 2
xorps xmm8, xmm8
movd esi, xmm6
xorps xmm7, xmm7
xorps xmm9, xmm9
unpcklps xmm7, xmm8
movsd xmm0, qword [r8 + 0x3d0]
mov ecx, reloc.WS2_32.dll_recv
mov ebp, dword [r8 + 0x3d8]
movsd qword [rsp + 0x20], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180049c24
movss xmm0, dword [0x1800d5ba0]
jmp 0x180049c2c
movss xmm0, dword [0x1800d5b10]
mov ecx, 0x57
movss dword [0x1800e40b8], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm11, dword [rsp + 0x24]
movd xmm10, ebp
mov rbp, qword [rsp + 0xb0]
test ax, ax
jns 0x180049c96
movss xmm2, dword [0x1800e40b8]
movaps xmm1, xmm11
movaps xmm0, xmm2
mulss xmm1, xmm2
mulss xmm0, dword [rsp + 0x20]
addss xmm8, xmm1
addss xmm9, xmm0
movaps xmm0, xmm10
mulss xmm0, xmm2
addss xmm6, xmm0
movaps xmm7, xmm9
unpcklps xmm7, xmm8
movaps xmm7, xmm7
movd esi, xmm6
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x180049cdf
movss xmm1, dword [0x1800e40b8]
movaps xmm0, xmm1
mulss xmm11, xmm1
mulss xmm0, dword [rsp + 0x20]
mulss xmm10, xmm1
subss xmm8, xmm11
subss xmm9, xmm0
subss xmm6, xmm10
movaps xmm7, xmm9
unpcklps xmm7, xmm8
movaps xmm7, xmm7
movd esi, xmm6
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movaps xmm11, xmmword [rsp + 0x30]
movaps xmm10, xmmword [rsp + 0x40]
movaps xmm9, xmmword [rsp + 0x50]
movaps xmm8, xmmword [rsp + 0x60]
test ax, ax
jns 0x180049d13
addss xmm6, dword [0x1800e40b8]
movd esi, xmm6
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x180049d2f
subss xmm6, dword [0x1800e40b8]
movd esi, xmm6
movaps xmm6, xmmword [rsp + 0x80]
test rdi, rdi
je 0x180049d6b
mov rax, qword [rbx]
test rax, rax
je 0x180049d6b
movsd qword [rax + 0x90], xmm7
mov dword [rax + 0x98], esi
mov rax, qword [rbx]
test rax, rax
je 0x180049d6b
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x180049d6b
movsd qword [rcx + 0x50], xmm7
mov dword [rcx + 0x58], esi
movaps xmm7, xmmword [rsp + 0x70]
mov rsi, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xa8]
add rsp, 0x90
pop rdi
ret
mov rdx, qword [0x1800f4530]
test rdi, rdi
je 0x180049db3
mov rcx, qword [rbx]
test rcx, rcx
je 0x180049db3
mov rax, qword [rdx + 0x38]
mov rcx, qword [rcx + rax]
mov rax, qword [rdx + 0x10]
mov qword [rcx + rax], 0
jmp 0x180049d70
mov rax, qword [rdx + 0x10]
xor ecx, ecx
mov qword [rcx + rax], rcx
jmp 0x180049d70