Function at 0x18008cf40
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x308]
sub rsp, 0x3e0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x180150040]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
mov rsi, rcx
mov rax, qword [rcx + 0x78]
cmp byte [rax], 0
je 0x18008cff1
cmp byte [0x1801530f6], 0
je 0x18008d00d
cmp byte [rcx + 0x568], 0
je 0x18008cfda
xor edi, edi
mov dword [0x180150310], 0x10
mov qword [0x180150314], 2
mov qword [0x180150320], rdi
mov r8d, 0x28
lea rdx, [0x180150308]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
mov byte [rsi + 0x568], dil
mov ecx, dword [0x180150300]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x18008cff1
mov byte [0x1801530f6], al
mov qword [rbp + 0x290], 0x64
lea rcx, [rbp + 0x290]
call fcn.18008de20
jmp 0x18008d74c
mov ecx, dword [0x180152b6c]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
xor edi, edi
mov eax, dword [rdx + rax]
cmp dword [0x180154940], eax
jle 0x18008d070
lea rcx, [0x180154940]
call fcn.1800d1288
cmp dword [0x180154940], 0xffffffff
jne 0x18008d070
mov qword [0x180154948], rdi
lea rcx, [rbp + 0x290]
call fcn.18008e520
mov rdx, qword [rax]
mov qword [0x180154948], rdx
lea rcx, [0x180154940]
call fcn.1800d121c
mov ecx, dword [0x180150300]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18008d08c
movzx eax, byte [0x1801530f5]
test al, al
jne 0x18008d099
cmp byte [0x1801530f4], dil
je 0x18008d6ac
call fcn.18008d9c0
cmp byte [0x1801530f4], dil
jne 0x18008d281
lea rbx, [rsi + 0x518]
mov qword [rbp + 0x290], rbx
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x18008d0d2
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov eax, dword [rbx + 0x4c]
cmp eax, 0x7fffffff
jne 0x18008d0ed
dec eax
mov dword [rbx + 0x4c], eax
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rdx, [rsp + 0x30]
mov rcx, qword [rsi + 0x180]
call fcn.180099f90
mov r13, rax
lea r14, [rsi + 0x190]
sub r13, r14
mov r15d, 0x1b
lea rdx, [r14 + r13]
mov rcx, r14
call fcn.18006f3e0
add r14, 0x20
sub r15, 1
jne 0x18008d111
lea r9, [fcn.180065440]
mov edx, 0x20
mov r8d, 0x1b
lea rcx, [rsp + 0x30]
call fcn.1800d147c
nop
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
lea rcx, [rsi - 8]
call fcn.18008d790
call fcn.180065680
mov rcx, qword [rsi + 0x510]
sub rcx, 2
mov qword [rbp + 0x290], rcx
lea rcx, str._chest_stealer__Looting__items
mov qword [rbp + 0x2a0], rcx
mov qword [rbp + 0x2a8], 0x20
movaps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x2a0], xmm0
lea r9, [rbp + 0x290]
lea rdx, [rbp + 0x2a0]
mov rcx, rax
call fcn.180081e00
mov r9, qword [rsi + 0x508]
mov rdx, qword [rsi + 0x500]
dec rdx
mov rax, r9
shr rax, 2
and rdx, rax
mov rax, qword [rsi + 0x4f8]
mov rcx, r9
and ecx, 3
mov rax, qword [rax + rdx*8]
mov ecx, dword [rax + rcx*4]
mov dword [0x1801502f0], ecx
sub qword [rsi + 0x510], 1
mov rax, rdi
je 0x18008d1f1
lea rax, [r9 + 1]
mov qword [rsi + 0x508], rax
mov dword [0x1801530f0], 1
mov qword [0x180150310], 0x10
mov dword [0x180150318], edi
mov qword [0x180150320], rdi
mov r8d, 0x28
lea rdx, [0x180150308]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
mov byte [rsi + 0x568], 1
mov edx, 0x32
mov ecx, 0x1e
call fcn.1800631e0
movsxd rcx, eax
mov qword [rbp + 0x290], rcx
lea rcx, [rbp + 0x290]
call fcn.18008de20
lea rcx, [rbp + 0x290]
call fcn.18008e520
mov rcx, qword [rax]
mov qword [0x180154948], rcx
lea rcx, [0x1801530e8]
call qword [sym.imp.USER32.dll_GetCursorPos]
cmp dword [0x1801502f0], 0xffffffff
je 0x18008d664
cmp dword [0x1801530f0], 1
jle 0x18008d2e5
mov ecx, dword [0x180150300]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x18008d2c8
mov ecx, 0x45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x18008d2c8
mov ecx, 0x1b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18008d2e5
mov dword [0x1801530f0], edi
mov ecx, 0xffffffff
mov dword [0x1801502f0], ecx
mov byte [0x1801530f6], 1
jmp 0x18008d745
movsxd rax, dword [0x1801502f0]
lea rbx, [0x180153010]
mov rbx, qword [rbx + rax*8]
mov qword [rbp + 0x290], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
lea rdx, [rbp + 0x2a0]
mov rcx, qword [0x1801530f8]
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x18008d332
mov ecx, 0xffffffff
mov qword [rbp + 0x298], 0xffffffffffffffff
jmp 0x18008d362
mov eax, dword [0x1801502f4]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
add ecx, dword [rbp + 0x2a0]
mov dword [rbp + 0x298], ecx
mov eax, dword [0x1801502f8]
cdq
sub eax, edx
sar eax, 1
add eax, dword [rbp + 0x2a4]
mov dword [rbp + 0x29c], eax
mov rax, qword [rbp + 0x298]
lea r14d, [rcx + rbx]
mov dword [rbp + 0x290], r14d
shr rax, 0x20
mov ebx, dword [rbp + 0x294]
add ebx, eax
mov dword [rbp + 0x294], ebx
lea rcx, [rbp + 0x298]
call fcn.18008e520
mov rdx, qword [rax]
sub rdx, qword [0x180154948]
movabs r15, 0x431bde82d7b634db
mov rax, r15
imul rdx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
movd xmm0, dword [0x1801502fc]
cvtdq2ps xmm0, xmm0
comiss xmm1, xmm0
jbe 0x18008d4dc
mov edx, ebx
mov ecx, r14d
call qword [sym.imp.USER32.dll_SetCursorPos]
mov edx, 0x3c
mov ecx, 0x32
call fcn.1800631e0
movsxd rcx, eax
mov qword [rbp + 0x298], rcx
lea rcx, [rbp + 0x298]
call fcn.18008de20
movsxd r9, ebx
mov edx, 0x204
mov r8d, 0x2000000
mov rcx, qword [0x1801530f8]
call qword [sym.imp.USER32.dll_PostMessageW]
mov edx, 0x46
mov ecx, 0x23
call fcn.1800631e0
movsxd rcx, eax
mov qword [rbp + 0x298], rcx
lea rcx, [rbp + 0x298]
call fcn.18008de20
movsxd r9, ebx
xor r8d, r8d
mov edx, 0x205
mov rcx, qword [0x1801530f8]
call qword [sym.imp.USER32.dll_PostMessageW]
mov rax, qword [rbp + 0x290]
mov qword [0x1801530e8], rax
mov r9, qword [rsi + 0x508]
mov rdx, qword [rsi + 0x500]
dec rdx
mov rax, r9
shr rax, 2
and rdx, rax
mov rax, qword [rsi + 0x4f8]
mov rcx, r9
and ecx, 3
mov rax, qword [rax + rdx*8]
mov ecx, dword [rax + rcx*4]
mov dword [0x1801502f0], ecx
sub qword [rsi + 0x510], 1
mov rax, rdi
je 0x18008d4b2
lea rax, [r9 + 1]
mov qword [rsi + 0x508], rax
inc dword [0x1801530f0]
lea rcx, [rbp + 0x290]
call fcn.18008e520
mov rcx, qword [rax]
mov qword [0x180154948], rcx
mov al, 1
jmp 0x18008d6f2
mov dword [rsp + 0x2c], 0x3f800000
xorps xmm6, xmm6
mov dword [rsp + 0x24], 0
lea rcx, [rbp + 0x290]
call fcn.18008e520
mov rcx, qword [rax]
sub rcx, qword [0x180154948]
mov rax, r15
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
movd xmm0, dword [0x1801502fc]
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [rsp + 0x28], xmm1
lea rcx, [rsp + 0x24]
lea rax, [rsp + 0x28]
comiss xmm6, xmm1
cmovbe rcx, rax
lea rax, [rsp + 0x2c]
comiss xmm1, dword [0x180136944]
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [rbp + 0x298], xmm0
movd xmm7, dword [0x1801530e8]
cvtdq2ps xmm7, xmm7
mov dword [rbp + 0x290], 0x3f800000
mov dword [rsp + 0x20], 0
lea rcx, [rsp + 0x20]
lea rax, [rbp + 0x298]
comiss xmm6, xmm0
cmovbe rcx, rax
lea rax, [rbp + 0x290]
comiss xmm0, dword [0x180136944]
cmovbe rax, rcx
movss xmm5, dword [rax]
movss dword [rbp + 0x298], xmm0
movd xmm3, dword [0x1801530ec]
cvtdq2ps xmm3, xmm3
mov dword [rsp + 0x20], 0x3f800000
mov dword [rbp + 0x290], 0
lea rcx, [rbp + 0x290]
lea rax, [rbp + 0x298]
comiss xmm6, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x20]
comiss xmm0, dword [0x180136944]
cmovbe rax, rcx
movss xmm1, dword [rax]
movaps xmm0, xmm1
addss xmm0, xmm1
movss xmm4, dword [0x1801369a4]
movaps xmm2, xmm4
subss xmm2, xmm0
mulss xmm1, xmm1
mulss xmm2, xmm1
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
subss xmm0, xmm3
mulss xmm2, xmm0
addss xmm2, xmm3
cvttss2si edx, xmm2
movaps xmm0, xmm5
addss xmm0, xmm5
subss xmm4, xmm0
mulss xmm5, xmm5
mulss xmm4, xmm5
movd xmm0, r14d
cvtdq2ps xmm0, xmm0
subss xmm0, xmm7
mulss xmm4, xmm0
addss xmm4, xmm7
cvttss2si ecx, xmm4
call qword [sym.imp.USER32.dll_SetCursorPos]
mov al, 1
jmp 0x18008d6f2
cmp byte [rsi + 0x568], 0
je 0x18008d6a8
mov dword [0x180150310], 0x10
mov qword [0x180150314], 2
mov qword [0x180150320], rdi
mov r8d, 0x28
lea rdx, [0x180150308]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
mov byte [rsi + 0x568], 0
mov al, 1
jmp 0x18008d6f2
cmp byte [rsi + 0x568], dil
je 0x18008d6f0
mov dword [0x180150310], 0x10
mov qword [0x180150314], 2
mov qword [0x180150320], rdi
mov r8d, 0x28
lea rdx, [0x180150308]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
mov byte [rsi + 0x568], dil
xor al, al
mov byte [0x1801530f4], al
cmp dword [0x1801502f0], 0xffffffff
jne 0x18008d74c
cmp byte [rsi + 0x568], 0
je 0x18008d745
mov dword [0x180150310], 0x10
mov qword [0x180150314], 2
mov qword [0x180150320], rdi
mov r8d, 0x28
lea rdx, [0x180150308]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
mov byte [rsi + 0x568], 0
mov byte [0x1801530f4], 0
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.1800d11c0
lea r11, [rsp + 0x3e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret