Function at 0x1800aa3a0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r14
lea rbp, [rsp - 0x3f]
sub rsp, 0xd0
mov rax, qword [0x18011f040]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rsi, r9
mov qword [rbp + 0xf], r9
mov rdi, qword [rbp + 0x7f]
mov qword [rbp + 0x17], rdi
xor r12d, r12d
mov rcx, r9
mov rbx, qword [r9 + 0x18]
cmp rbx, 0xf
jbe 0x1800aa3f0
mov rcx, qword [r9]
mov qword [rsp + 0x20], reloc.WS2_32.dll_inet_addr
lea r9, str.AthenaLobby
xor r8d, r8d
mov rdx, qword [rsi + 0x10]
call fcn.18001c750
movzx r14d, byte [0x180121e92]
cmp rax, 0xffffffffffffffff
je 0x1800aa464
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1800aa427
mov rcx, qword [rdi]
mov qword [rsp + 0x20], 0xc
lea r9, str.OnBeginIntro
xor r8d, r8d
mov rdx, qword [rdi + 0x10]
call fcn.18001c750
cmp rax, 0xffffffffffffffff
je 0x1800aa464
test r14b, r14b
je 0x1800aa464
movsd xmm0, qword [0x180108900]
comisd xmm0, xmmword [0x180120d48]
ja 0x1800aa53d
mov rcx, rsi
cmp rbx, 0xf
jbe 0x1800aa470
mov rcx, qword [rsi]
mov qword [rsp + 0x20], reloc.WS2_32.dll_inet_addr
lea r9, str.AthenaLobby
xor r8d, r8d
mov rdx, qword [rsi + 0x10]
call fcn.18001c750
cmp rax, 0xffffffffffffffff
je 0x1800aa4cf
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1800aa49f
mov rcx, qword [rdi]
mov qword [rsp + 0x20], 9
lea r9, str.OnSuccess
xor r8d, r8d
mov rdx, qword [rdi + 0x10]
call fcn.18001c750
cmp rax, 0xffffffffffffffff
je 0x1800aa4cf
test r14b, r14b
je 0x1800aa4cf
cmp dword [0x180120d50], 0xf
jl 0x1800aa53d
mov rcx, rsi
cmp rbx, 0xf
jbe 0x1800aa4db
mov rcx, qword [rsi]
mov qword [rsp + 0x20], reloc.WS2_32.dll_inet_addr
lea r9, str.AthenaLobby
xor r8d, r8d
mov rdx, qword [rsi + 0x10]
call fcn.18001c750
cmp rax, 0xffffffffffffffff
je 0x1800aaa3d
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1800aa50e
mov rcx, qword [rdi]
mov qword [rsp + 0x20], 0x2b
lea r9, str.DynamicHandleLoadingScreenVisibilityChanged
xor r8d, r8d
mov rdx, qword [rdi + 0x10]
call fcn.18001c750
cmp rax, 0xffffffffffffffff
je 0x1800aaa3d
test r14b, r14b
je 0x1800aaa3d
cmp byte [0x180121e90], 0
jne 0x1800aa7a4
mov byte [0x180121e90], 1
mov cl, 1
call fcn.1800066e0
call fcn.18009d5b0
mov rcx, qword [0x180120d40]
test rcx, rcx
je 0x1800aa59e
cmp qword [0x1801216c0], 0
je 0x1800aa57c
mov rax, qword [0x180121658]
jmp 0x1800aa586
movsxd rax, dword [0x180120ce8]
add rax, rcx
mov rbx, qword [rax]
test rbx, rbx
je 0x1800aa59e
movsxd rax, dword [0x180120ce0]
mov rbx, qword [rax + rbx]
test rbx, rbx
jne 0x1800aa5a1
mov rbx, r12
lea rdx, [0x18011f490]
cmp qword [0x18011f4a8], 7
cmova rdx, qword [0x18011f490]
cmp word [rdx], 0
je 0x1800aa5d4
mov rcx, 0xffffffffffffffff
inc rcx
cmp word [rdx + rcx*2], 0
jne 0x1800aa5c5
inc rcx
jmp 0x1800aa5d7
mov rcx, r12
mov dword [rbp - 0x39], ecx
mov dword [rbp - 0x35], ecx
mov rax, r12
test ecx, ecx
cmovne rax, rdx
mov qword [rbp - 0x41], rax
movaps xmm0, xmmword [rbp - 0x41]
movdqa xmmword [rbp - 0x41], xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x19], r12
mov r8d, 3
lea rdx, [0x180106da4]
lea rcx, [rbp - 0x31]
call fcn.18001d0a0
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x31]
mov rcx, rbx
call fcn.180097bb0
mov rcx, qword [0x180120d40]
test rcx, rcx
je 0x1800aa669
cmp qword [0x1801216c0], 0
je 0x1800aa647
mov rax, qword [0x180121658]
jmp 0x1800aa651
movsxd rax, dword [0x180120ce8]
add rax, rcx
mov rbx, qword [rax]
test rbx, rbx
je 0x1800aa669
movsxd rax, dword [0x180120ce0]
mov rbx, qword [rax + rbx]
test rbx, rbx
jne 0x1800aa66c
mov rbx, r12
mov dword [rbp - 0x39], reloc.WS2_32.dll_socket
mov dword [rbp - 0x35], reloc.WS2_32.dll_socket
lea rax, str._nWelcome_to_CraniumV1_
mov qword [rbp - 0x41], rax
movaps xmm0, xmmword [rbp - 0x41]
movdqa xmmword [rbp - 0x41], xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x19], r12
mov r8d, 3
lea rdx, [0x180106da4]
lea rcx, [rbp - 0x31]
call fcn.18001d0a0
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x31]
mov rcx, rbx
call fcn.180097bb0
call fcn.1800211e0
call fcn.1800ab610
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x19], r12
mov r8d, socket
lea rdx, str.Welcome_to_CraniumV1_
lea rcx, [rbp - 0x31]
call fcn.18001d0a0
lea rcx, [rbp - 0x31]
call fcn.18008f120
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x39], r12
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], r12
mov r8d, 0x10
lea rdx, str.GetEngineVersion
lea rcx, [rbp - 0x61]
call fcn.18001d0a0
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
mov rcx, qword [0x180120d30]
call fcn.180097bb0
xor r8d, r8d
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x41]
call fcn.180098750
nop
mov r9d, 0x1d
lea r8, str.Current_Engine_Game_Version:
xor edx, edx
mov rcx, rax
call fcn.18001d460
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x19], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x31], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x21], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp - 0x31]
call fcn.18008f120
nop
lea rcx, [rbp - 0x11]
call fcn.18001f2b0
xor ecx, ecx
call fcn.1800afbf0
call fcn.1800375f0
mov edx, 1
lea rcx, [rbp - 0x31]
call fcn.1800abdb0
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x11]
call fcn.1800ab9b0
nop
mov r9, rbx
mov r8, rax
lea rcx, [rbp - 0x61]
call fcn.18002c140
nop
lea rcx, [rbp - 0x11]
call fcn.18001f320
nop
lea rcx, [rbp - 0x31]
call fcn.18001f320
mov rdx, qword [0x180121d38]
cmp rdx, 7
jbe 0x1800aa836
mov rcx, qword [0x180121d20]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1800aa831
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800aa8c9
mov rcx, r8
call fcn.1800cb4b8
movups xmm0, xmmword [rbp - 0x61]
movaps xmmword [0x180121d20], xmm0
movups xmm1, xmmword [rbp - 0x51]
movaps xmmword [0x180121d30], xmm1
movdqa xmm0, xmmword [0x180108db0]
movdqu xmmword [rbp - 0x51], xmm0
mov word [rbp - 0x61], r12w
lea rcx, [rbp - 0x61]
call fcn.18001f320
mov rax, qword [0x180121da8]
cmp rax, qword [0x180121db0]
je 0x1800aa87e
mov qword [0x180121db0], rax
call fcn.1800c1f80
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x51], xmm1
mov r8d, 0x11
lea rdx, str.GameplayAbilities
lea rcx, [rbp - 0x61]
call fcn.18001d0a0
nop
test rbx, rbx
je 0x1800aa8d0
lea rdx, [rbp - 0x61]
mov rcx, rbx
call fcn.1800049d0
test eax, eax
jle 0x1800aa8d0
movsxd r14, eax
add r14, rbx
jmp 0x1800aa8d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r14, r12
lea rcx, [rbp - 0x61]
call fcn.18001f2b0
mov rbx, qword [r14]
movsxd rax, dword [r14 + 8]
lea r14, [rbx + rax*8]
cmp rbx, r14
je 0x1800aa980
cmp dword [0x180120d50], 5
jge 0x1800aa944
mov rcx, qword [rbx]
test rcx, rcx
jne 0x1800aa906
mov rax, r12
jmp 0x1800aa911
movsxd rax, dword [0x18011f3d4]
mov rax, qword [rax + rcx]
mov qword [rbp + 0x27], rax
mov rdx, qword [0x180121db0]
cmp rdx, qword [0x180121db8]
je 0x1800aa932
mov qword [rdx], rax
add qword [0x180121db0], 8
jmp 0x1800aa973
lea r8, [rbp + 0x27]
lea rcx, [0x180121da8]
call fcn.18000f720
jmp 0x1800aa973
mov rdx, qword [0x180121db0]
cmp rdx, qword [0x180121db8]
je 0x1800aa964
mov rax, qword [rbx]
mov qword [rdx], rax
add qword [0x180121db0], 8
jmp 0x1800aa973
mov r8, rbx
lea rcx, [0x180121da8]
call fcn.18000f720
add rbx, 8
cmp rbx, r14
jne 0x1800aa8f0
mov byte [rbp + 0x1f], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], r12
mov r8d, 0x19
lea rdx, str.SetReplayRecordingEnabled
lea rcx, [rbp - 0x61]
call fcn.18001d0a0
lea r8, [rbp + 0x1f]
lea rdx, [rbp - 0x61]
mov rcx, qword [0x180122390]
call fcn.180097bb0
mov dword [rbp + 0x27], 0x3f800000
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], r12
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.SetHUDScale
lea rcx, [rbp - 0x61]
call fcn.18001d0a0
lea r8, [rbp + 0x27]
lea rdx, [rbp - 0x61]
mov rcx, qword [0x180122390]
call fcn.180097bb0
mov dword [rbp + 0x27], 0x3f800000
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], r12
mov r8d, socket
lea rdx, str.SetHUDScaleMultiplier
lea rcx, [rbp - 0x61]
call fcn.18001d0a0
lea r8, [rbp + 0x27]
lea rdx, [rbp - 0x61]
mov rcx, qword [0x180122390]
call fcn.180097bb0
mov ecx, WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800aaa83
cmp byte [0x180121e95], 0
jne 0x1800aaa83
cmp byte [0x180121e92], 0
je 0x1800aaa83
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], 7
mov word [rbp - 0x61], r12w
xor edx, edx
lea rcx, [rbp - 0x61]
call fcn.180035b20
nop
mov rcx, rsi
call fcn.18001f2b0
nop
mov rcx, rdi
call fcn.18001f2b0
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1800cb0c0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop r12
pop rbp
ret