Function at 0x180001200
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
mov rax, qword [0x18004d020]
xor rax, rsp
mov qword [rbp + 0x1f], rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss xmm8, dword [0x180046258]
mulss xmm6, xmm8
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mulss xmm7, xmm8
movss dword [0x1800996a0], xmm6
movss dword [0x1800996a4], xmm7
cmp byte [0x1800996ae], 0
je 0x1800012d5
mov r8, qword [0x180099710]
movaps xmm0, xmmword [0x180046490]
movups xmmword [rbp + 7], xmm0
lea rcx, [rbp + 7]
call fcn.18000ca30
movss dword [rbp - 0x11], xmm6
movss dword [rbp - 0xd], xmm7
movss xmm0, dword [0x180046284]
movss dword [rsp + 0x28], xmm0
mov r9d, eax
movss xmm2, dword [0x18004d048]
lea rdx, [rbp - 0x11]
lea rcx, [r8 + 0x1de8]
call fcn.1800275b0
call fcn.180006590
xor ebx, ebx
test rax, rax
je 0x1800013f1
mov rcx, qword [rax + 0x780]
test rcx, rcx
je 0x1800013f1
mov rax, qword [rcx + 0x78]
test rax, rax
je 0x1800013f1
mov rax, qword [rax + 0x180]
test rax, rax
je 0x1800013f1
mov rax, qword [rax + 0x38]
mov rcx, qword [rax]
test rcx, rcx
je 0x1800013f1
cmp qword [rcx + 0x70], rbx
je 0x1800013f1
cmp byte [0x1800998e8], bl
jne 0x1800013f1
call fcn.180006590
test rax, rax
je 0x180001354
mov rax, qword [rax + 0x780]
test rax, rax
je 0x180001354
mov rax, qword [rax + 0x78]
jmp 0x180001357
mov rax, rbx
mov rax, qword [rax + 0x180]
mov rax, qword [rax + 0x38]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x70]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x220]
mov qword [0x180099990], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.18003d8a0
call fcn.18003d380
lea rdx, [0x180036fc0]
lea rcx, [0x180099990]
call fcn.18003c960
call fcn.18003d3f0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x3c6b960
mov qword [0x180099988], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.18003d8a0
call fcn.18003d380
lea rdx, [0x1800371c0]
lea rcx, [0x180099988]
call fcn.18003c960
call fcn.18003d3f0
mov byte [0x1800998e8], 1
jmp 0x1800014f1
call fcn.180006590
test rax, rax
je 0x180001432
mov rcx, qword [rax + 0x780]
test rcx, rcx
je 0x180001432
mov rax, qword [rcx + 0x78]
test rax, rax
je 0x180001432
mov rax, qword [rax + 0x180]
test rax, rax
je 0x180001432
mov rax, qword [rax + 0x38]
mov rcx, qword [rax]
test rcx, rcx
je 0x180001432
cmp qword [rcx + 0x70], rbx
jne 0x1800014f1
cmp byte [0x1800998e8], bl
je 0x1800014f1
call fcn.180006590
test rax, rax
je 0x18000145a
mov rax, qword [rax + 0x780]
test rax, rax
je 0x18000145a
mov rax, qword [rax + 0x78]
jmp 0x18000145d
mov rax, rbx
mov rax, qword [rax + 0x180]
mov rax, qword [rax + 0x38]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x70]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x220]
mov qword [0x180099990], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.18003d8a0
call fcn.18003d380
lea rdx, [0x180036fc0]
lea rcx, [0x180099990]
call fcn.18003cfe0
call fcn.18003d3f0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x3c6b960
mov qword [0x180099988], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.18003d8a0
call fcn.18003d380
lea rdx, [0x1800371c0]
lea rcx, [0x180099988]
call fcn.18003cfe0
call fcn.18003d3f0
mov byte [0x1800998e8], bl
call fcn.18000a1e0
test al, al
je 0x180001b69
call fcn.180006590
test rax, rax
je 0x18000151a
mov rax, qword [rax + 0x780]
test rax, rax
je 0x18000151a
mov rax, qword [rax + 0x78]
jmp 0x18000151d
mov rax, rbx
mov rax, qword [rax + 0x180]
mov rax, qword [rax + 0x38]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x30]
mov qword [0x180099690], rax
call fcn.180006590
test rax, rax
je 0x180001570
mov rax, qword [rax + 0x780]
test rax, rax
je 0x180001570
mov rax, qword [rax + 0x78]
test rax, rax
je 0x180001570
mov rax, qword [rax + 0x180]
mov rax, qword [rax + 0x38]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x30]
mov rcx, qword [rax + 0x2a0]
jmp 0x180001573
mov rcx, rbx
mov qword [0x1800996b0], rcx
cmp byte [0x1800996b9], bl
je 0x1800015f0
call fcn.180009f00
mov rdi, rax
test rax, rax
je 0x1800015f0
call fcn.180001c70
mov rcx, qword [0x180099690]
lea rdx, [rbp - 0x11]
mov rcx, qword [rcx + 0x2b8]
call fcn.180006d60
lea rdx, [rbp - 0x29]
mov rcx, rdi
call fcn.1800050e0
lea r8, [rbp - 0x29]
lea rdx, [rbp - 0x11]
lea rcx, [rbp + 7]
call fcn.1800073e0
movsd xmm0, qword [rax]
movsd qword [rbp - 0x29], xmm0
mov eax, dword [rax + 8]
mov dword [rbp - 0x21], eax
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800015f0
lea rdx, [rbp - 0x29]
call fcn.1800080d0
cmp byte [0x180099699], bl
je 0x18000161d
mov rax, qword [0x1800996b0]
movss xmm0, dword [0x1800996a8]
movss dword [rax + 0x98], xmm0
mov byte [0x18004d045], bl
cmp byte [0x180099699], bl
jmp 0x180001623
cmp byte [0x18004d045], bl
jne 0x18000163d
mov rax, qword [0x1800996b0]
mov dword [rax + 0x98], 0x3f800000
mov byte [0x18004d045], 1
cmp byte [0x1800996ad], bl
je 0x180001739
mov ecx, 0x61
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180001739
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], rax
call fcn.180002570
mov rdx, rax
lea rcx, [rbp + 7]
call fcn.180009d70
nop
mov r14d, ebx
mov rdx, qword [rbp + 0xf]
mov rax, rdx
mov r8, qword [rbp + 7]
sub rax, r8
sar rax, 3
test rax, rax
je 0x1800016e5
mov rsi, rbx
nop dword [rax + rax]
mov rdi, qword [r8 + rsi]
movzx eax, byte [rdi + 0xd0d]
sub al, 3
cmp al, 1
ja 0x1800016cc
mov rdx, rdi
mov rcx, rdi
call fcn.180007da0
mov rdx, rdi
call fcn.180008410
mov rdx, qword [rbp + 0xf]
mov r8, qword [rbp + 7]
inc r14d
add rsi, 8
mov rcx, rdx
sub rcx, r8
sar rcx, 3
movsxd rax, r14d
cmp rax, rcx
jb 0x1800016a0
test r8, r8
je 0x180001739
mov rax, qword [rbp + 0x17]
sub rax, r8
sar rax, 3
lea rdx, [rax*8]
mov rax, r8
cmp rdx, 0x1000
jb 0x180001725
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180001725
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.18003f268
xorps xmm0, xmm0
movdqu xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], rbx
cmp byte [0x1800996ac], 0
je 0x18000188b
lea rdx, [rbp - 0x11]
mov rcx, qword [0x1800996b0]
call fcn.1800050e0
mov rax, qword [0x1800996b0]
mov rdi, qword [rax + 0x288]
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000179a
movss xmm0, dword [rbp - 0x11]
movss dword [rbp - 0x29], xmm0
movss xmm0, dword [0x180099688]
mulss xmm0, dword [0x1800462c4]
mulss xmm0, xmm8
addss xmm0, dword [rbp - 9]
jmp 0x1800017d2
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800017ea
movss xmm0, dword [rbp - 0x11]
movss dword [rbp - 0x29], xmm0
movss xmm2, dword [0x180099688]
mulss xmm2, dword [0x1800462c4]
mulss xmm2, xmm8
movss xmm0, dword [rbp - 9]
subss xmm0, xmm2
movss xmm1, dword [rbp - 0xd]
movss dword [rbp - 0x25], xmm1
movss dword [rbp - 0x21], xmm0
lea rdx, [rbp - 0x29]
call fcn.180004d50
mov byte [rdi + 0x168], 5
movss xmm0, dword [0x180099688]
movss xmm2, dword [0x180046330]
mulss xmm0, xmm2
movss dword [rdi + 0x198], xmm0
movss xmm0, dword [0x180099688]
mulss xmm0, xmm2
movss dword [rdi + 0x18c], xmm0
movss xmm1, dword [0x180099688]
mulss xmm1, xmm2
movss dword [rdi + 0x1a0], xmm1
cmp byte [0x1800996b8], 0
je 0x180001860
mov rax, qword [0x1800996b0]
and byte [rax + 0x5c], 0xf7
mov byte [0x18004d04c], 0
mov byte [0x18004d046], 0
cmp byte [0x1800996ac], 0
jmp 0x180001892
cmp byte [0x18004d04c], 0
jne 0x18000187b
mov rax, qword [0x1800996b0]
or byte [rax + 0x5c], 8
mov byte [0x18004d04c], 1
mov byte [0x18004d046], 0
cmp byte [0x1800996ac], 0
jmp 0x180001892
cmp byte [0x18004d046], 0
jne 0x1800018d5
mov rcx, qword [0x1800996b0]
mov rax, qword [rcx + 0x288]
mov byte [rax + 0x168], 3
mov dword [rax + 0x198], ebx
mov dword [rax + 0x18c], 0x438c0000
mov dword [rax + 0x1a0], 0x43e10000
or byte [rcx + 0x5c], 8
mov byte [0x18004d04c], 1
mov byte [0x18004d046], 1
cmp byte [0x180099684], 0
je 0x1800019a2
mov ecx, 0x62
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800019a2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rax
call fcn.180002270
mov rdx, rax
lea rcx, [rbp - 0x29]
call fcn.180009d70
nop
mov esi, ebx
mov rax, qword [rbp - 0x21]
mov r8, qword [rbp - 0x29]
sub rax, r8
sar rax, 3
test rax, rax
je 0x180001956
mov rdi, rbx
nop dword [rax]
mov rcx, qword [r8 + rdi]
call fcn.180007a60
inc esi
lea rdi, [rdi + 8]
mov rcx, qword [rbp - 0x21]
mov r8, qword [rbp - 0x29]
sub rcx, r8
sar rcx, 3
movsxd rax, esi
cmp rax, rcx
jb 0x180001930
test r8, r8
je 0x1800019a2
mov rdx, qword [rbp - 0x19]
sub rdx, r8
and rdx, 0xfffffffffffffff8
mov rax, r8
cmp rdx, 0x1000
jb 0x18000198e
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000198e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.18003f268
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rbx
cmp byte [0x18009968c], 0
je 0x180001a75
mov ecx, 0x63
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180001a75
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], rax
call fcn.180002870
mov rdx, rax
lea rcx, [rbp - 0x11]
call fcn.180009d70
mov r9d, ebx
mov rax, qword [rbp - 9]
mov r8, qword [rbp - 0x11]
sub rax, r8
sar rax, 3
test rax, rax
je 0x180001a29
mov rdx, rbx
nop word [rax + rax]
mov rax, qword [r8 + rdx]
mov byte [rax + 0x2b1], 2
inc r9d
lea rdx, [rdx + 8]
mov rcx, qword [rbp - 9]
mov r8, qword [rbp - 0x11]
sub rcx, r8
sar rcx, 3
movsxd rax, r9d
cmp rax, rcx
jb 0x180001a00
test r8, r8
je 0x180001a75
mov rdx, qword [rbp - 1]
sub rdx, r8
and rdx, 0xfffffffffffffff8
mov rax, r8
cmp rdx, 0x1000
jb 0x180001a61
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180001a61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.18003f268
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], rbx
cmp byte [0x180099698], 0
je 0x180001aad
cmp qword [0x1800996b0], 0
je 0x180001aa0
call fcn.180008a80
test rax, rax
je 0x180001aa0
or byte [rax + 0x1204], 1
mov byte [0x18004d044], 0
cmp byte [0x180099698], 0
jne 0x180001b69
cmp byte [0x18004d044], 0
jne 0x180001b69
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], rax
call fcn.180001f70
mov rdx, rax
lea rcx, [rbp + 7]
call fcn.180009d70
mov r9, qword [rbp + 0xf]
mov rax, r9
mov r8, qword [rbp + 7]
sub rax, r8
sar rax, 3
test rax, rax
je 0x180001b29
mov rdx, rbx
mov rax, qword [r8 + rdx]
test rax, rax
je 0x180001b11
and byte [rax + 0x1204], 0xfe
mov byte [0x18004d044], 1
mov r9, qword [rbp + 0xf]
mov r8, qword [rbp + 7]
inc ebx
add rdx, 8
mov rcx, r9
sub rcx, r8
sar rcx, 3
movsxd rax, ebx
cmp rax, rcx
jb 0x180001af2
test r8, r8
je 0x180001b69
mov rdx, qword [rbp + 0x17]
sub rdx, r8
and rdx, 0xfffffffffffffff8
mov rax, r8
cmp rdx, 0x1000
jb 0x180001b61
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180001b61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.18003f268
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.18003eda0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop rbp
ret