Function at 0x1800eb400
Capabilities:
Log keystrokes via polling

Disassembly:
sub rsp, 0x118
mov rax, qword [0x1801d1038]
xor rax, rsp
mov qword [rsp + 0x98], rax
cmp byte [0x1802637cb], 0
je 0x1800eb781
mov rcx, qword [0x1801ef8e0]
mov qword [rsp + 0x110], rdi
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
movabs rdi, 0xd80958fc74e988a6
mov rdx, rdi
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
mov r8b, 1
mov rcx, qword [rax]
mov edx, dword [rcx]
movabs rcx, 0x997abd671d25ca0b
call fcn.18006e790
test eax, eax
jne 0x1800eb779
mov rcx, qword [0x1801ef8e0]
mov qword [rsp + 0x120], rbx
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm8
movaps xmmword [rsp + 0xd0], xmm9
movaps xmmword [rsp + 0xc0], xmm10
movaps xmmword [rsp + 0xb0], xmm11
movaps xmmword [rsp + 0xa0], xmm12
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
movabs rdx, 0xa200eb1ee790f448
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
xor r8d, r8d
movabs rdx, 0x837765a25378f0bb
mov rcx, qword [rax]
movups xmm9, xmmword [rcx]
movsd xmm10, qword [rcx + 0x10]
lea rcx, [rsp + 0x78]
call fcn.18006ee90
movss xmm0, dword [rsp + 0x78]
mulss xmm0, dword [0x180199edc]
cvtps2pd xmm8, xmm0
movss xmm0, dword [rsp + 0x88]
mulss xmm0, dword [0x180199edc]
cvtps2pd xmm7, xmm0
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movaps xmm0, xmm7
andps xmm1, xmmword [0x18019a470]
cvtps2pd xmm6, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
xorps xmm1, xmm1
xorps xmm11, xmm11
cvtsd2ss xmm1, xmm0
movaps xmm0, xmm7
xorps xmm1, xmmword [0x18019a490]
cvtss2sd xmm1, xmm1
mulsd xmm1, xmm6
cvtsd2ss xmm11, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movaps xmm0, xmm8
cvtps2pd xmm2, xmm1
mulsd xmm2, xmm6
cvtpd2ps xmm6, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
mov rcx, qword [0x1801ef8e0]
xorps xmm7, xmm7
movaps xmm8, xmm11
cvtsd2ss xmm7, xmm0
movss xmm0, dword [0x18019a1f0]
addss xmm8, xmm9
movaps xmm12, xmm6
shufps xmm9, xmm9, 0xaa
addss xmm12, xmm9
mulss xmm11, xmm0
movaps xmm9, xmm7
mulss xmm6, xmm0
addss xmm9, xmm10
mulss xmm7, xmm0
addss xmm11, xmm8
addss xmm6, xmm12
addss xmm7, xmm9
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
mov rdx, rdi
call fcn.1800063f0
mov rcx, qword [0x1801ef8e0]
mov rax, qword [rcx]
mov ebx, dword [rax]
call fcn.180006370
mov rdx, qword [0x1801ef8e0]
xor r8d, r8d
mov qword [rsp + 0x70], r8
mov dword [rsp + 0x70], ebx
mov ecx, dword [rdx + 8]
mov rax, qword [rsp + 0x70]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
lea rdx, [rsp + 0x90]
mov rcx, qword [0x1801ef8e0]
mov qword [rsp + 0x70], r8
mov byte [rsp + 0x70], 1
mov eax, dword [rcx + 8]
mov qword [rcx + rax*8 + 0x130], rdx
inc dword [rcx + 8]
mov rdx, qword [0x1801ef8e0]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rdx + 8]
mov qword [rdx + rcx*8 + 0x130], rax
inc dword [rdx + 8]
movabs rdx, 0x3a87e44bb9a01d54
mov rcx, qword [0x1801ef8e0]
call fcn.1800063f0
mov edx, 2
movabs rcx, 0xf3a21bcd95725a4a
mov r8d, Ordinal_211
call fcn.18006cf20
movaps xmm10, xmmword [rsp + 0xc0]
mov rbx, qword [rsp + 0x120]
test eax, eax
jne 0x1800eb6c6
lea ecx, [rax + 1]
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x1800eb745
mov rcx, qword [0x1801ef8e0]
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
mov rdx, rdi
call fcn.1800063f0
mov rax, qword [0x1801ef8e0]
movaps xmm3, xmm9
movss xmm0, dword [0x18019a23c]
movaps xmm2, xmm12
movss dword [rsp + 0x68], xmm0
movaps xmm1, xmm8
mov byte [rsp + 0x60], 1
mov rax, qword [rax]
mov byte [rsp + 0x58], 1
mov eax, dword [rax]
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x40], 1
mov dword [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_50
movss dword [rsp + 0x30], xmm7
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm11
call fcn.18006f230
movaps xmm11, xmmword [rsp + 0xb0]
movaps xmm9, xmmword [rsp + 0xd0]
movaps xmm8, xmmword [rsp + 0xe0]
movaps xmm7, xmmword [rsp + 0xf0]
movaps xmm6, xmmword [rsp + 0x100]
movaps xmm12, xmmword [rsp + 0xa0]
mov rdi, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x98]
xor rcx, rsp
call fcn.1800f6320
add rsp, 0x118
ret