Function at 0x180047c80
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x90
mov rax, qword [0x1800de960]
mov rcx, qword [rax + 0x10]
mov rax, qword [0x1800de880]
mov rdi, qword [rcx]
cmp byte [rax + 0x128], 0
je 0x180047cc0
test rdi, rdi
je 0x180047cc0
mov rax, qword [rdi + 8]
test rax, rax
je 0x180047cc0
mov byte [rax + 0x189], 1
mov rax, qword [0x1800de880]
mov qword [rsp + 0xa8], rbx
lea rbx, [rdi + 8]
cmp byte [rax + reloc.WLDAP32.dll_Ordinal_301], 0
je 0x180047d0b
test rdi, rdi
je 0x180047d41
mov rdx, qword [rbx]
test rdx, rdx
je 0x180047d41
mov rcx, qword [0x1800de950]
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180047d48
mov rax, qword [rcx + 8]
mov dword [r8 + rax], 0x41200000
jmp 0x180047d41
test rdi, rdi
je 0x180047d41
mov r8, qword [rdi + 8]
test r8, r8
je 0x180047d41
mov rcx, qword [0x1800de950]
lea rbx, [rdi + 8]
mov rax, qword [rcx + 0x38]
mov r9, qword [r8 + rax]
test r9, r9
je 0x180047d48
mov rax, qword [rcx + 8]
lea rbx, [rdi + 8]
mov dword [r9 + rax], 0x3f800000
mov rcx, qword [0x1800de950]
mov rax, qword [0x1800de880]
cmp byte [rax + 0x12a], 0
je 0x180047d85
test rdi, rdi
je 0x180047d85
mov rdx, qword [rbx]
test rdx, rdx
je 0x180047d85
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180047d85
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x2c000
mov rcx, qword [0x1800de950]
mov rax, qword [0x1800de880]
cmp byte [rax + 0x126], 0
je 0x180047dc2
test rdi, rdi
je 0x180047dc2
mov rdx, qword [rbx]
test rdx, rdx
je 0x180047dc2
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180047dc2
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x16000
mov rcx, qword [0x1800de950]
mov rax, qword [0x1800de880]
cmp byte [rax + 0x180], 0
je 0x180047dff
test rdi, rdi
je 0x180047dff
mov rdx, qword [rbx]
test rdx, rdx
je 0x180047dff
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180047dff
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x5800
mov rcx, qword [0x1800de950]
mov rax, qword [0x1800de880]
cmp byte [rax + 0x181], 0
je 0x180047e3c
test rdi, rdi
je 0x180047e3c
mov rdx, qword [rbx]
test rdx, rdx
je 0x180047e3c
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180047e3c
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0xb000
mov rcx, qword [0x1800de950]
mov rax, qword [0x1800de880]
cmp byte [rax + 0x125], 0
je 0x180047e72
test rdi, rdi
je 0x180047e72
mov rdx, qword [rbx]
test rdx, rdx
je 0x180047e72
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180047e72
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 2
mov rax, qword [0x1800de880]
cmp byte [rax + 0x129], 0
je 0x180047ec4
test rdi, rdi
je 0x180047f04
mov rax, qword [rbx]
test rax, rax
je 0x180047f04
mov rax, qword [rax + 0x30]
test rax, rax
je 0x180047f04
mov rax, qword [rax + 0x10]
test rax, rax
je 0x180047f04
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x180047f04
mov rax, qword [rcx + 0x70]
test rax, rax
je 0x180047f04
mov rax, qword [rax]
test rax, rax
je 0x180047f04
mov dword [rax + 0x2c], 0xbf800000
jmp 0x180047f04
test rdi, rdi
je 0x180047f04
mov rax, qword [rbx]
test rax, rax
je 0x180047f04
mov rax, qword [rax + 0x30]
test rax, rax
je 0x180047f04
mov rax, qword [rax + 0x10]
test rax, rax
je 0x180047f04
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x180047f04
mov rax, qword [rcx + 0x70]
test rax, rax
je 0x180047f04
mov rax, qword [rax]
test rax, rax
je 0x180047f04
mov dword [rax + 0x2c], 0x3e800000
mov rax, qword [0x1800de880]
cmp byte [rax + 0x124], 0
je 0x180047f62
mov rax, qword [0x1800de960]
mov rax, qword [rax + 0x30]
test rax, rax
je 0x180047f29
mov rax, qword [rax]
jmp 0x180047f31
mov rax, qword [rsp + 0xa0]
test rax, rax
je 0x180047f62
test rdi, rdi
je 0x180047f62
mov rcx, qword [rbx]
test rcx, rcx
je 0x180047f62
mov rcx, qword [rcx + 0x30]
test rcx, rcx
je 0x180047f62
movsd xmm0, qword [rax + 0x3d0]
movsd qword [rcx + 0x30], xmm0
mov eax, dword [rax + 0x3d8]
mov dword [rcx + 0x38], eax
mov rax, qword [0x1800de880]
mov qword [rsp + 0xb8], rsi
cmp byte [rax + 0x12b], 0
je 0x180047fb6
cmp byte [0x1800de1b1], 0
jne 0x180047fb6
mov rcx, qword [0x1800de960]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rcx + 0x88]
mov rdx, qword [rax]
mov rax, qword [rcx + 0x60]
test rdx, rdx
jne 0x180047fa5
xor ecx, ecx
jmp 0x180047fa9
mov rcx, qword [rdx + 8]
call rax
mov ecx, eax
call rsi
mov byte [0x1800de1b1], 1
mov rcx, qword [0x1800de880]
cmp byte [rcx + 0x12c], 0
je 0x1800482b0
mov ecx, dword [rcx + 0x120]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180047fec
cmp byte [0x1800de1b2], 0
sete al
mov byte [0x1800de1b2], al
jmp 0x180047ff3
movzx eax, byte [0x1800de1b2]
test al, al
je 0x1800482c9
mov rax, qword [0x1800de960]
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x180048010
mov r8, qword [rcx]
jmp 0x180048018
mov r8, qword [rsp + 0xa0]
test r8, r8
je 0x1800482b0
mov qword [rsp + 0xb0], rbp
movaps xmmword [rsp + 0x80], xmm6
xorps xmm6, xmm6
movaps xmmword [rsp + 0x40], xmm10
movaps xmmword [rsp + 0x30], xmm11
movaps xmmword [rsp + 0x70], xmm7
movaps xmmword [rsp + 0x60], xmm8
movaps xmmword [rsp + 0x50], xmm9
test rdi, rdi
je 0x18004810f
mov rax, qword [rbx]
test rax, rax
je 0x180048072
mov rcx, qword [rax + 0x30]
xorps xmm0, xmm0
test rcx, rcx
je 0x180048072
movups xmmword [rcx + 0x30], xmm0
mov rcx, qword [rbx]
test rcx, rcx
je 0x180048097
mov rdx, qword [0x1800de950]
mov rax, qword [rdx + 0x38]
mov rcx, qword [rcx + rax]
mov rax, qword [rdx + 0x10]
mov qword [rcx + rax], 2
jmp 0x1800480ae
mov rax, qword [0x1800de950]
mov rcx, qword [rax + 0x10]
mov qword [rcx], 2
test rdi, rdi
je 0x180048121
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800480d8
mov byte [rcx + 0x2c], 0x25
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800480d8
xorps xmm0, xmm0
unpcklps xmm0, xmm6
movsd qword [rcx + 0x320], xmm0
movss dword [rcx + 0x328], xmm6
test rdi, rdi
je 0x180048121
mov rsi, qword [rbx]
test rsi, rsi
je 0x180048121
movsd xmm7, qword [rsi + 0x90]
mov esi, dword [rsi + 0x98]
movaps xmm8, xmm7
movsd qword [rsp + 0x20], xmm7
movss xmm9, dword [rsp + 0x20]
shufps xmm8, xmm8, 0x55
movd xmm6, esi
jmp 0x180048134
mov rax, qword [0x1800de950]
mov rcx, qword [rax + 0x10]
mov qword [rcx], 2
xorps xmm8, xmm8
movd esi, xmm6
xorps xmm7, xmm7
xorps xmm9, xmm9
unpcklps xmm7, xmm8
movsd xmm0, qword [r8 + 0x3d0]
mov ecx, reloc.WS2_32.dll_recv
mov ebp, dword [r8 + 0x3d8]
movsd qword [rsp + 0x20], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180048164
movss xmm0, dword [0x1800cfb58]
jmp 0x18004816c
movss xmm0, dword [0x1800cfae0]
mov ecx, 0x57
movss dword [0x1800dd0b8], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm11, dword [rsp + 0x24]
movd xmm10, ebp
mov rbp, qword [rsp + 0xb0]
test ax, ax
jns 0x1800481d6
movss xmm2, dword [0x1800dd0b8]
movaps xmm1, xmm11
movaps xmm0, xmm2
mulss xmm1, xmm2
mulss xmm0, dword [rsp + 0x20]
addss xmm8, xmm1
addss xmm9, xmm0
movaps xmm0, xmm10
mulss xmm0, xmm2
addss xmm6, xmm0
movaps xmm7, xmm9
unpcklps xmm7, xmm8
movaps xmm7, xmm7
movd esi, xmm6
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18004821f
movss xmm1, dword [0x1800dd0b8]
movaps xmm0, xmm1
mulss xmm11, xmm1
mulss xmm0, dword [rsp + 0x20]
mulss xmm10, xmm1
subss xmm8, xmm11
subss xmm9, xmm0
subss xmm6, xmm10
movaps xmm7, xmm9
unpcklps xmm7, xmm8
movaps xmm7, xmm7
movd esi, xmm6
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movaps xmm11, xmmword [rsp + 0x30]
movaps xmm10, xmmword [rsp + 0x40]
movaps xmm9, xmmword [rsp + 0x50]
movaps xmm8, xmmword [rsp + 0x60]
test ax, ax
jns 0x180048253
addss xmm6, dword [0x1800dd0b8]
movd esi, xmm6
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18004826f
subss xmm6, dword [0x1800dd0b8]
movd esi, xmm6
movaps xmm6, xmmword [rsp + 0x80]
test rdi, rdi
je 0x1800482ab
mov rax, qword [rbx]
test rax, rax
je 0x1800482ab
movsd qword [rax + 0x90], xmm7
mov dword [rax + 0x98], esi
mov rax, qword [rbx]
test rax, rax
je 0x1800482ab
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x1800482ab
movsd qword [rcx + 0x50], xmm7
mov dword [rcx + 0x58], esi
movaps xmm7, xmmword [rsp + 0x70]
mov rsi, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xa8]
add rsp, 0x90
pop rdi
ret
mov rdx, qword [0x1800de950]
test rdi, rdi
je 0x1800482f3
mov rcx, qword [rbx]
test rcx, rcx
je 0x1800482f3
mov rax, qword [rdx + 0x38]
mov rcx, qword [rcx + rax]
mov rax, qword [rdx + 0x10]
mov qword [rcx + rax], 0
jmp 0x1800482b0
mov rax, qword [rdx + 0x10]
xor ecx, ecx
mov qword [rcx + rax], rcx
jmp 0x1800482b0