Function at 0x1800d66d0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x2a0]
sub rsp, 0x3a0
mov rax, qword [0x1802c2700]
xor rax, rsp
mov qword [rbp + 0x290], rax
xor ebx, ebx
mov rax, qword [0x1802d8370]
cmp byte [rax], bl
je 0x1800d6aad
lea rax, [rbp + 0x100]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x150]
mov qword [rbp + 0x30], rax
mov dword [rbp + 0x28], ebx
mov dword [rbp + 0x38], ebx
cmp byte [0x1802e76a0], bl
je 0x1800d6be6
lea rcx, [rbp + 0x20]
call qword [0x1802e3bb0]
mov rax, qword [rbp + 0x20]
cmp dword [rax], ebx
jne 0x1800d6aad
lea rax, [rbp + 0x100]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x150]
mov qword [rbp + 0x30], rax
mov dword [rbp + 0x28], ebx
mov dword [rbp + 0x38], ebx
cmp byte [0x1802e76a0], bl
je 0x1800d6bf0
lea rcx, [rbp + 0x20]
call qword [0x1802de7a0]
mov rax, qword [rbp + 0x20]
cmp dword [rax], ebx
je 0x1800d6aad
mov ecx, dword [0x1802eed10]
mov rax, qword gs:[0x58]
mov edx, 0x26c
mov r14, qword [rax + rcx*8]
add r14, rdx
mov eax, dword [r14]
cmp dword [0x1802e7c10], eax
jg 0x1800d6bfa
cmp byte [0x1802e7c0c], 0
jne 0x1800d6aad
mov qword [rbp], 0x5f5e100
mov byte [rbp + 8], 1
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
call fcn.1800a2b90
xor sil, sil
lea rax, [rbp + 0x100]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x150]
mov qword [rbp + 0x30], rax
mov dword [rbp + 0x38], ebx
mov dword [rbp + 0x150], ebx
lea rax, str.Chat_Message
mov qword [rbp + 0x158], rax
lea rax, [0x1801d8113]
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x178], rax
mov qword [rbp + 0x180], rax
mov dword [rbp + 0x188], pe_nt_image_headers64
mov dword [rbp + 0x28], 8
cmp byte [0x1802e76a0], sil
je 0x1800d6c3d
lea rcx, [rbp + 0x20]
call qword [0x1802de798]
lea r15, vtable.YimMenu::ScriptMgr.0
mov rdi, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [rbp + 0x100]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x150]
mov qword [rbp + 0x30], rax
mov dword [rbp + 0x28], ebx
mov dword [rbp + 0x38], ebx
cmp byte [0x1802e76a0], 0
je 0x1800d6c47
lea rcx, [rbp + 0x20]
call qword [0x1802de7a0]
mov rax, qword [rbp + 0x20]
cmp dword [rax], 0
jne 0x1800d6933
mov ecx, 0x1b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1800d6902
lea rax, [rbp + 0x100]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x150]
mov qword [rbp + 0x30], rax
mov dword [rbp + 0x28], ebx
mov dword [rbp + 0x38], ebx
cmp byte [0x1802e76a0], 0
je 0x1800d6c51
lea rcx, [rbp + 0x20]
call qword [0x1802de7b0]
mov sil, 1
mov byte [rbp + 8], 0
mov eax, dword [r14]
cmp dword [0x1802d9738], eax
jg 0x1800d6c5b
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp - 0x80], xmm0
lea rdx, [rbp - 0x80]
lea rcx, [0x1802d96c0]
call fcn.1800b3890
jmp 0x1800d6880
test sil, sil
jne 0x1800d6bae
lea rax, [rbp + 0x100]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x150]
mov qword [rbp + 0x30], rax
mov dword [rbp + 0x28], ebx
mov dword [rbp + 0x38], ebx
cmp byte [0x1802e76a0], sil
je 0x1800d6ce3
lea rcx, [rbp + 0x20]
call qword [0x1802de7a8]
mov rax, qword [rbp + 0x20]
mov r14, qword [rax]
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
inc rdi
cmp byte [r14 + rdi], 0
jne 0x1800d6985
movabs rsi, 0x7fffffffffffffff
cmp rdi, rsi
ja 0x1800d6bda
cmp rdi, 0xf
ja 0x1800d69cd
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x18], 0xf
mov r8, rdi
mov rdx, r14
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi], 0
jmp 0x1800d6a5c
mov rax, rdi
or rax, 0xf
cmp rax, rsi
jbe 0x1800d6a06
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.180199d50
test rax, rax
je 0x1800d6a9c
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1800d6a3e
mov rsi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
test rcx, rcx
je 0x1800d6a3e
cmp rcx, 0x1000
jb 0x1800d6a36
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800d6be0
jmp 0x1800d69e7
call fcn.180199d50
mov rbx, rax
mov qword [rbp], rbx
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x18], rsi
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rdi], 0
lea rcx, [rbp]
call fcn.18013f2e0
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1800d6bae
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800d6aa3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800d6aa3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180199d8c
jmp 0x1800d6bae
lea rax, [rbp - 0x70]
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
lea rax, [rbp - 0x48]
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x10], rbx
lea rax, [rsp + 0x40]
mov qword [rbp], rax
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
mov ecx, 0x40
call fcn.180199d50
mov rdx, rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], 0x35
mov qword [rsp + 0x58], 0x3f
movups xmm0, xmmword [str.Please_wait_until_you_are_in_a_game_to_open_the_chat_]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1801e9a78]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1801e9a88]
movups xmmword [rax + 0x20], xmm0
mov ecx, dword [0x1801e9a98]
mov dword [rax + 0x30], ecx
movzx eax, byte [0x1801e9a9c]
mov byte [rdx + 0x34], al
mov byte [rdx + 0x35], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 4
mov qword [rsp + 0x78], 0xf
mov dword [rsp + 0x60], 0x74616843
mov byte [rsp + 0x64], 0
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x1388
mov r9d, 3
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.1800b7490
lea rcx, [rbp + 0x20]
call fcn.1800635f0
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.180199d30
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.180055aa0
int3
call fcn.180055a80
int3
call fcn.18013e530
jmp 0x1800d673d
call fcn.18013e530
jmp 0x1800d677b
lea rcx, [0x1802e7c10]
call fcn.18019a1ac
cmp dword [0x1802e7c10], 0xffffffff
jne 0x1800d67bb
lea rcx, [0x1802e7c0c]
call fcn.1800e0600
lea rcx, [0x1801c8570]
call fcn.18019a0ec
nop
lea rcx, [0x1802e7c10]
call fcn.18019a140
jmp 0x1800d67bb
call fcn.18013e530
jmp 0x1800d685e
call fcn.18013e530
jmp 0x1800d68a9
call fcn.18013e530
jmp 0x1800d68f5
lea rcx, [0x1802d9738]
call fcn.18019a1ac
cmp dword [0x1802d9738], edi
jne 0x1800d6915
mov qword [0x1802d96c0], r15
xorps xmm0, xmm0
movups xmmword [0x1802d96e0], xmm0
movups xmmword [0x1802d96f0], xmm0
movups xmmword [0x1802d9700], xmm0
movdqa xmmword [0x1802d96d0], xmm0
mov dword [0x1802d9710], edi
mov dword [0x1802d96c8], 2
mov dword [0x1802d9714], ebx
mov qword [0x1802d9718], rbx
movdqa xmmword [0x1802d9720], xmm0
mov byte [0x1802d9730], 0
lea rcx, [0x1801c7f60]
call fcn.18019a0ec
lea rcx, [0x1802d9738]
call fcn.18019a140
jmp 0x1800d6915
call fcn.18013e530
jmp 0x1800d6965