Function at 0x180008520
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1800a7048]
xor rax, rsp
mov qword [rsp + 0xa8], rax
mov rsi, rdx
cmp byte [0x1800a99b4], 0
jne 0x1800085a9
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x1800a99b8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x1800a99c0], rax
mov byte [0x1800a99b4], 1
jmp 0x1800085b0
mov rax, qword [0x1800a99c0]
movups xmm0, xmmword [rax + 0x508]
movups xmmword [rsp + 0x38], xmm0
mov r13d, dword [rax + 0x518]
movd eax, xmm0
test al, al
je 0x180008882
mov rcx, rsi
call fcn.180014fa0
mov rbx, rax
mov qword [rsp + 0x50], rax
mov rdx, rsi
mov rcx, rax
call fcn.1800148c0
mov r15, rax
mov ecx, dword [rsp + 0x3c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180008882
xor r12d, r12d
xor bpl, bpl
movss xmm6, dword [0x180098264]
cmp r13d, 2
jne 0x180008628
mov rdx, rsi
mov rcx, rbx
call fcn.1800139e0
comiss xmm0, xmm6
seta bpl
mov rdx, rsi
mov rcx, r15
call fcn.180011ba0
mov ebx, eax
mov dword [rsp + 0x30], eax
xor r14d, r14d
nop dword [rax]
test bpl, bpl
jne 0x180008882
mov r8, rsi
mov edx, r14d
mov rcx, r15
call fcn.180011dd0
mov rdi, rax
test rax, rax
je 0x180008846
mov rbx, qword [0x1800a99f0]
mov r8d, 1
lea rdx, str.net_minecraft_item_ItemStack
lea rcx, [rsp + 0x80]
call fcn.18001e0e0
mov rdx, rax
mov rcx, rbx
call fcn.180001ef0
mov rbx, rax
mov r8d, 1
lea rdx, str.metadata
lea rcx, [rsp + 0x58]
call fcn.18001e0e0
mov r8, rax
cmp qword [rax + 0x18], 0x10
jb 0x1800086b6
mov r8, qword [rax]
test rbx, rbx
je 0x1800086df
test rsi, rsi
je 0x1800086df
mov rax, qword [rsi]
mov r10, qword [rax + 0x2f0]
lea r9, [0x180096a9c]
mov rdx, rbx
mov rcx, rsi
call r10
mov rbx, rax
jmp 0x1800086e1
xor ebx, ebx
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x18000871e
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008719
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800088c3
call fcn.18004a6ec
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
test rbx, rbx
je 0x180008842
test rsi, rsi
je 0x180008842
mov rax, qword [rsi]
mov r9, qword [rax + 0x320]
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call r9
cmp eax, 0x4025
jne 0x180008842
mov ecx, dword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8, rsi
mov edx, r14d
mov rcx, r15
call fcn.180011cc0
mov eax, dword [rsp + 0x44]
cdq
sub eax, edx
sar eax, 1
mov edi, eax
xor edx, edx
lea rcx, str.LWJGL
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
lea rcx, [rsp + 0xa0]
call qword [sym.imp.USER32.dll_GetCursorPos]
xor r9d, r9d
mov edx, 0x204
lea r8d, [r9 + 1]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov edx, 0x205
lea r8d, [r9 + 1]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_Sleep]
test r13d, r13d
jne 0x1800087ef
mov bpl, 1
jmp 0x180008823
cmp r13d, 1
jne 0x180008804
inc r12d
cmp r12d, 2
jne 0x180008842
movzx ebp, r13b
jmp 0x180008823
cmp r13d, 2
jne 0x180008842
mov rdx, rsi
mov rcx, qword [rsp + 0x50]
call fcn.1800139e0
comiss xmm0, xmm6
seta bpl
test bpl, bpl
je 0x180008842
mov edi, dword [rsp + 0x40]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8, rsi
mov ebx, dword [rsp + 0x30]
mov edx, ebx
mov rcx, r15
call fcn.180011cc0
jmp 0x18000884a
mov ebx, dword [rsp + 0x30]
mov edi, dword [rsp + 0x40]
cmp r14d, 8
jne 0x18000885f
mov rdx, rsi
mov rcx, r15
call fcn.180011ba0
cmp eax, ebx
jne 0x18000886d
inc r14d
cmp r14d, 9
jge 0x180008882
jmp 0x180008640
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8, rsi
mov edx, ebx
mov rcx, r15
call fcn.180011cc0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.18004a310
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.1800510f0
int3