Function at 0x180048a90
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x180107eb0]
mov rcx, qword [rax + 0x10]
mov rax, qword [0x180107dd0]
mov rbx, qword [rcx]
cmp byte [rax + 0x127], 0
je 0x180048ada
test rbx, rbx
je 0x180048ada
mov rax, qword [rbx + 8]
test rax, rax
je 0x180048ada
mov byte [rax + 0x189], 1
mov rax, qword [0x180107dd0]
cmp byte [rax + 0x12c], 0
je 0x180048b1a
test rbx, rbx
je 0x180048b48
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x180048b48
mov rcx, qword [0x180107ea0]
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180048b4f
mov rax, qword [rcx + 8]
mov dword [r8 + rax], 0x41700000
jmp 0x180048b48
test rbx, rbx
je 0x180048b48
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x180048b48
mov rcx, qword [0x180107ea0]
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180048b4f
mov rax, qword [rcx + 8]
mov dword [r8 + rax], 0x3f800000
mov rcx, qword [0x180107ea0]
mov rax, qword [0x180107dd0]
cmp byte [rax + 0x129], 0
je 0x180048b8d
test rbx, rbx
je 0x180048b8d
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x180048b8d
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180048b8d
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x2c000
mov rcx, qword [0x180107ea0]
mov rax, qword [0x180107dd0]
cmp byte [rax + 0x126], 0
je 0x180048bcb
test rbx, rbx
je 0x180048bcb
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x180048bcb
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180048bcb
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x16000
mov rcx, qword [0x180107ea0]
mov rax, qword [0x180107dd0]
cmp byte [rax + 0x17c], 0
je 0x180048c09
test rbx, rbx
je 0x180048c09
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x180048c09
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180048c09
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0x5800
mov rcx, qword [0x180107ea0]
mov rax, qword [0x180107dd0]
cmp byte [rax + 0x17d], 0
je 0x180048c47
test rbx, rbx
je 0x180048c47
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x180048c47
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180048c47
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 0xb000
mov rcx, qword [0x180107ea0]
mov rax, qword [0x180107dd0]
cmp byte [rax + 0x125], 0
je 0x180048c7e
test rbx, rbx
je 0x180048c7e
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x180048c7e
mov rax, qword [rcx + 0x38]
mov r8, qword [rdx + rax]
test r8, r8
je 0x180048c7e
mov rax, qword [rcx + 0x30]
mov dword [r8 + rax], 2
mov rax, qword [0x180107dd0]
cmp byte [rax + 0x128], 0
je 0x180048cd1
test rbx, rbx
je 0x180048d12
mov rax, qword [rbx + 8]
test rax, rax
je 0x180048d12
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x180048d12
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x180048d12
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x180048d12
mov rax, qword [rcx + 0x70]
test rax, rax
je 0x180048d12
mov rax, qword [rax]
test rax, rax
je 0x180048d12
mov dword [rax + 0x2c], 0xbf800000
jmp 0x180048d12
test rbx, rbx
je 0x180048d12
mov rax, qword [rbx + 8]
test rax, rax
je 0x180048d12
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x180048d12
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x180048d12
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x180048d12
mov rax, qword [rcx + 0x70]
test rax, rax
je 0x180048d12
mov rax, qword [rax]
test rax, rax
je 0x180048d12
mov dword [rax + 0x2c], 0x3e800000
mov rax, qword [0x180107dd0]
cmp byte [rax + 0x124], 0
je 0x180048d6d
mov rax, qword [0x180107eb0]
mov rax, qword [rax + 0x30]
test rax, rax
je 0x180048d37
mov rax, qword [rax]
jmp 0x180048d3b
mov rax, qword [rbp + 0x67]
test rax, rax
je 0x180048d6d
test rbx, rbx
je 0x180048d6d
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180048d6d
mov rcx, qword [rcx + 0x30]
test rcx, rcx
je 0x180048d6d
movsd xmm0, qword [rax + 0x3d0]
movsd qword [rcx + 0x30], xmm0
mov eax, dword [rax + 0x3d8]
mov dword [rcx + 0x38], eax
mov rax, qword [0x180107dd0]
mov qword [rsp + 0xa8], rdi
cmp byte [rax + 0x12a], 0
je 0x180048dc1
cmp byte [0x180107ce1], 0
jne 0x180048dc1
mov rcx, qword [0x180107eb0]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rcx + 0x88]
mov rdx, qword [rax]
mov rax, qword [rcx + 0x60]
test rdx, rdx
jne 0x180048db0
xor ecx, ecx
jmp 0x180048db4
mov rcx, qword [rdx + 8]
call rax
mov ecx, eax
call rdi
mov byte [0x180107ce1], 1
mov rax, qword [0x180107dd0]
cmp byte [rax + 0x12b], 0
je 0x1800490fb
mov ecx, dword [rax + 0x120]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180048df7
cmp byte [0x180107ce2], 0
sete al
mov byte [0x180107ce2], al
jmp 0x180048dfe
movzx eax, byte [0x180107ce2]
test al, al
je 0x1800490ce
mov rax, qword [0x180107eb0]
mov r8, qword [rax + 0x30]
test r8, r8
je 0x180048e1b
mov r8, qword [r8]
jmp 0x180048e1f
mov r8, qword [rbp + 0x67]
test r8, r8
je 0x1800490fb
movaps xmmword [rsp + 0x80], xmm6
xorps xmm6, xmm6
movaps xmmword [rsp + 0x70], xmm7
movaps xmmword [rsp + 0x60], xmm8
movaps xmmword [rsp + 0x50], xmm9
movaps xmmword [rsp + 0x40], xmm10
test rbx, rbx
je 0x180048f20
mov rax, qword [rbx + 8]
test rax, rax
je 0x180048e6c
mov rcx, qword [rax + 0x30]
xorps xmm0, xmm0
test rcx, rcx
je 0x180048e6c
movups xmmword [rcx + 0x30], xmm0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180048e92
mov rdx, qword [0x180107ea0]
mov rax, qword [rdx + 0x38]
mov rcx, qword [rax + rcx]
mov rax, qword [rdx + 0x10]
mov qword [rcx + rax], 2
jmp 0x180048ead
mov rax, qword [0x180107ea0]
mov rcx, qword [rax + 0x10]
mov qword [rcx], 2
test rbx, rbx
je 0x180048f32
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180048ebe
mov byte [rcx + 0x2c], 0x25
mov rcx, qword [rbx + 8]
mov qword [rbp - 9], 0
mov dword [rbp - 1], 0
test rcx, rcx
je 0x180048ee8
movsd xmm0, qword [rbp - 9]
mov eax, dword [rbp - 1]
movsd qword [rcx + 0x320], xmm0
mov dword [rcx + 0x328], eax
test rbx, rbx
je 0x180048f32
mov rax, qword [rbx + 8]
test rax, rax
je 0x180048f32
movsd xmm0, qword [rax + 0x90]
mov eax, dword [rax + 0x98]
movaps xmm7, xmm0
mov dword [rbp - 0x11], eax
movss xmm6, dword [rbp - 0x11]
movsd qword [rbp - 0x19], xmm0
movss xmm8, dword [rbp - 0x19]
shufps xmm7, xmm7, 0x55
jmp 0x180048f49
mov rax, qword [0x180107ea0]
mov rcx, qword [rax + 0x10]
mov qword [rcx], 2
xorps xmm8, xmm8
movss dword [rbp - 0x11], xmm6
xorps xmm7, xmm7
movss dword [rbp - 0x19], xmm8
movss dword [rbp - 0x15], xmm7
movsd xmm0, qword [r8 + 0x3d0]
mov ecx, reloc.WS2_32.dll_recv
mov eax, dword [r8 + 0x3d8]
movsd qword [rbp - 9], xmm0
mov dword [rbp - 1], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180048f7b
movss xmm0, dword [0x1800f51d0]
jmp 0x180048f83
movss xmm0, dword [0x1800f5158]
mov ecx, 0x57
movss dword [0x180106098], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
movss xmm9, dword [rbp - 1]
movss xmm10, dword [rbp - 5]
jae 0x180048fe6
movss xmm2, dword [0x180106098]
movaps xmm1, xmm10
movaps xmm0, xmm2
mulss xmm1, xmm2
mulss xmm0, dword [rbp - 9]
addss xmm7, xmm1
addss xmm8, xmm0
movaps xmm0, xmm9
mulss xmm0, xmm2
movss dword [rbp - 0x15], xmm7
addss xmm6, xmm0
movss dword [rbp - 0x19], xmm8
movss dword [rbp - 0x11], xmm6
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180049031
movss xmm1, dword [0x180106098]
movaps xmm0, xmm1
mulss xmm10, xmm1
mulss xmm0, dword [rbp - 9]
mulss xmm9, xmm1
subss xmm7, xmm10
subss xmm8, xmm0
subss xmm6, xmm9
movss dword [rbp - 0x15], xmm7
movss dword [rbp - 0x19], xmm8
movss dword [rbp - 0x11], xmm6
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
movaps xmm10, xmmword [rsp + 0x40]
movaps xmm9, xmmword [rsp + 0x50]
movaps xmm8, xmmword [rsp + 0x60]
movaps xmm7, xmmword [rsp + 0x70]
jae 0x180049067
addss xmm6, dword [0x180106098]
movss dword [rbp - 0x11], xmm6
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180049086
subss xmm6, dword [0x180106098]
movss dword [rbp - 0x11], xmm6
movaps xmm6, xmmword [rsp + 0x80]
test rbx, rbx
je 0x1800490fb
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1800490fb
movsd xmm0, qword [rbp - 0x19]
mov eax, dword [rbp - 0x11]
movsd qword [rcx + 0x90], xmm0
mov dword [rcx + 0x98], eax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1800490fb
mov rdx, qword [rcx + 0x30]
test rdx, rdx
je 0x1800490fb
movsd qword [rdx + 0x50], xmm0
mov dword [rdx + 0x58], eax
jmp 0x1800490fb
mov rdx, qword [0x180107ea0]
test rbx, rbx
je 0x1800490ed
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1800490ed
mov rax, qword [rdx + 0x38]
mov rcx, qword [rcx + rax]
jmp 0x1800490ef
xor ecx, ecx
mov rax, qword [rdx + 0x10]
mov qword [rcx + rax], 0
mov rdi, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xb0]
add rsp, 0x90
pop rbp
ret