Function at 0x18008d860
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x318]
sub rsp, 0x3f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x18014f040]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov rsi, rcx
mov rax, qword [rcx + 0x78]
cmp byte [rax], 0
je 0x18008d90d
cmp byte [0x1801520d6], 0
je 0x18008d929
cmp byte [rcx + 0x568], 0
je 0x18008d8f6
xor edi, edi
mov dword [0x18014f2e8], 0x10
mov qword [0x18014f2ec], 2
mov qword [0x18014f2f8], rdi
lea r8d, [rdi + 0x28]
lea rdx, [0x18014f2e0]
lea ecx, [rdi + 1]
call qword [sym.imp.USER32.dll_SendInput]
mov byte [rsi + 0x568], dil
mov ecx, dword [0x18014f2d8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x18008d90d
mov byte [0x1801520d6], al
mov qword [rbp + 0x2a0], 0x64
lea rcx, [rbp + 0x2a0]
call fcn.18008e7b0
jmp 0x18008e0e4
mov ecx, dword [0x180151b50]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
xor edi, edi
mov eax, dword [rdx + rax]
cmp dword [0x180153920], eax
jle 0x18008d98c
lea rcx, [0x180153920]
call fcn.1800d18d8
cmp dword [0x180153920], 0xffffffff
jne 0x18008d98c
mov qword [0x180153928], rdi
lea rcx, [rbp + 0x2a0]
call fcn.18008ee80
mov rdx, qword [rax]
mov qword [0x180153928], rdx
lea rcx, [0x180153920]
call fcn.1800d186c
mov ecx, dword [0x18014f2d8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18008d9a8
movzx eax, byte [0x1801520d5]
test al, al
jne 0x18008d9b5
cmp byte [0x1801520d4], dil
je 0x18008e046
call fcn.18008e350
cmp byte [0x1801520d4], dil
jne 0x18008dbc4
lea rbx, [rsi + 0x518]
mov qword [rbp + 0x2a0], rbx
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x18008d9ee
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov eax, dword [rbx + 0x4c]
cmp eax, 0x7fffffff
jne 0x18008da09
dec eax
mov dword [rbx + 0x4c], eax
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rdx, [rsp + 0x40]
mov rcx, qword [rsi + 0x180]
call fcn.18009a800
mov r12, rax
lea r14, [rsi + 0x190]
sub r12, r14
mov r15d, 0x1b
nop dword [rax]
lea rdx, [r12 + r14]
mov rcx, r14
call fcn.180070680
add r14, 0x20
sub r15, 1
jne 0x18008da30
lea r9, [fcn.180065ec0]
lea edx, [r15 + 0x20]
lea r8d, [r15 + 0x1b]
lea rcx, [rsp + 0x40]
call fcn.1800d1acc
nop
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
lea rcx, [rsi - 8]
call fcn.18008e120
call fcn.180066100
mov rcx, qword [rsi + 0x510]
sub rcx, 2
mov qword [rbp + 0x2a0], rcx
lea rcx, str._chest_stealer__Looting__items
mov qword [rbp + 0x2b0], rcx
mov qword [rbp + 0x2b8], 0x20
movaps xmm0, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp + 0x2b0], xmm0
lea r9, [rbp + 0x2a0]
lea rdx, [rbp + 0x2b0]
mov rcx, rax
call fcn.180082600
mov r9, qword [rsi + 0x508]
mov rdx, qword [rsi + 0x500]
dec rdx
mov rax, r9
shr rax, 2
and rdx, rax
mov rax, qword [rsi + 0x4f8]
mov rcx, r9
and ecx, 3
mov rax, qword [rax + rdx*8]
mov ecx, dword [rax + rcx*4]
mov dword [0x18014f2c8], ecx
sub qword [rsi + 0x510], 1
mov rax, rdi
je 0x18008db0d
lea rax, [r9 + 1]
mov qword [rsi + 0x508], rax
mov dword [0x1801520d0], 1
mov qword [0x18014f2e8], 0x10
mov dword [0x18014f2f0], edi
mov qword [0x18014f2f8], rdi
mov r8d, 0x28
lea rdx, [0x18014f2e0]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov byte [rsi + 0x568], 1
lea rcx, [0x1801523b0]
call fcn.180065ac0
mov ecx, eax
imul rax, rcx, 0x15
cmp eax, 3
ja 0x18008db87
nop dword [rax + rax]
lea rcx, [0x1801523b0]
call fcn.180065ac0
mov ecx, eax
imul rax, rcx, 0x15
cmp eax, 4
jb 0x18008db70
shr rax, 0x20
lea ecx, [rax + 0x1e]
mov qword [rbp + 0x2a0], rcx
lea rcx, [rbp + 0x2a0]
call fcn.18008e7b0
lea rcx, [rbp + 0x2a8]
call fcn.18008ee80
mov rcx, qword [rax]
mov qword [0x180153928], rcx
lea rcx, [0x1801520c8]
call qword [sym.imp.USER32.dll_GetCursorPos]
cmp dword [0x18014f2c8], 0xffffffff
je 0x18008dfff
cmp dword [0x1801520d0], 1
jle 0x18008dc28
mov ecx, dword [0x18014f2d8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x18008dc0b
mov ecx, 0x45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x18008dc0b
mov ecx, 0x1b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18008dc28
mov dword [0x1801520d0], edi
mov ecx, 0xffffffff
mov dword [0x18014f2c8], ecx
mov byte [0x1801520d6], 1
jmp 0x18008e0dd
movsxd rax, dword [0x18014f2c8]
lea rbx, [0x180151ff0]
mov rbx, qword [rbx + rax*8]
mov qword [rbp + 0x2a0], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
lea rdx, [rbp + 0x2b0]
mov rcx, qword [0x1801520d8]
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x18008dc73
lea ecx, [rax - 1]
mov qword [rbp + 0x2a8], 0xffffffffffffffff
jmp 0x18008dca3
mov eax, dword [0x18014f2cc]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
add ecx, dword [rbp + 0x2b0]
mov dword [rbp + 0x2a8], ecx
mov eax, dword [0x18014f2d0]
cdq
sub eax, edx
sar eax, 1
add eax, dword [rbp + 0x2b4]
mov dword [rbp + 0x2ac], eax
mov rax, qword [rbp + 0x2a8]
lea r14d, [rcx + rbx]
mov dword [rbp + 0x2a0], r14d
shr rax, 0x20
mov ebx, dword [rbp + 0x2a4]
add ebx, eax
mov dword [rbp + 0x2a4], ebx
lea rcx, [rsp + 0x20]
call fcn.18008ee80
mov rdx, qword [rax]
sub rdx, qword [0x180153928]
movabs r15, 0x431bde82d7b634db
mov rax, r15
imul rdx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
movd xmm0, dword [0x18014f2d4]
cvtdq2ps xmm0, xmm0
comiss xmm1, xmm0
jbe 0x18008de79
mov edx, ebx
mov ecx, r14d
call qword [sym.imp.USER32.dll_SetCursorPos]
lea rcx, [0x1801523b0]
call fcn.180065ac0
mov ecx, eax
imul rax, rcx, 0xb
cmp eax, 3
ja 0x18008dd57
nop word [rax + rax]
lea rcx, [0x1801523b0]
call fcn.180065ac0
mov ecx, eax
imul rax, rcx, 0xb
cmp eax, 4
jb 0x18008dd40
shr rax, 0x20
lea ecx, [rax + 0x32]
mov qword [rbp + 0x2a8], rcx
lea rcx, [rbp + 0x2a8]
call fcn.18008e7b0
movsxd rbx, ebx
mov r9, rbx
mov edx, 0x204
mov r8d, 0x2000000
mov rcx, qword [0x1801520d8]
call qword [sym.imp.USER32.dll_PostMessageW]
lea rcx, [0x1801523b0]
call fcn.180065ac0
mov ecx, eax
lea rax, [rcx + rcx*8]
shl rax, 2
cmp eax, 3
ja 0x18008ddcb
nop word [rax + rax]
lea rcx, [0x1801523b0]
call fcn.180065ac0
mov ecx, eax
lea rax, [rcx + rcx*8]
shl rax, 2
cmp eax, 4
jb 0x18008ddb0
shr rax, 0x20
lea ecx, [rax + 0x23]
mov qword [rbp + 0x2a8], rcx
lea rcx, [rbp + 0x2a8]
call fcn.18008e7b0
mov r9, rbx
xor r8d, r8d
mov edx, 0x205
mov rcx, qword [0x1801520d8]
call qword [sym.imp.USER32.dll_PostMessageW]
mov rax, qword [rbp + 0x2a0]
mov qword [0x1801520c8], rax
mov r9, qword [rsi + 0x508]
mov rdx, qword [rsi + 0x500]
dec rdx
mov rax, r9
shr rax, 2
and rdx, rax
mov rax, qword [rsi + 0x4f8]
mov rcx, r9
and ecx, 3
mov rax, qword [rax + rdx*8]
mov ecx, dword [rax + rcx*4]
mov dword [0x18014f2c8], ecx
sub qword [rsi + 0x510], 1
mov rax, rdi
je 0x18008de51
lea rax, [r9 + 1]
mov qword [rsi + 0x508], rax
inc dword [0x1801520d0]
lea rcx, [rsp + 0x38]
call fcn.18008ee80
mov rcx, qword [rax]
mov qword [0x180153928], rcx
mov al, 1
jmp 0x18008e08b
mov dword [rsp + 0x30], 0x3f800000
xorps xmm6, xmm6
mov dword [rsp + 0x28], 0
lea rcx, [rsp + 0x38]
call fcn.18008ee80
mov rcx, qword [rax]
sub rcx, qword [0x180153928]
mov rax, r15
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
xorps xmm1, xmm1
cvtsi2ss xmm1, rdx
movd xmm0, dword [0x18014f2d4]
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [rsp + 0x2c], xmm1
lea rcx, [rsp + 0x28]
lea rax, [rsp + 0x2c]
comiss xmm6, xmm1
cmovbe rcx, rax
lea rax, [rsp + 0x30]
comiss xmm1, dword [0x1801368d4]
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [rbp + 0x2a8], xmm0
movd xmm7, dword [0x1801520c8]
cvtdq2ps xmm7, xmm7
mov dword [rbp + 0x2a0], 0x3f800000
mov dword [rsp + 0x20], 0
lea rcx, [rsp + 0x20]
lea rax, [rbp + 0x2a8]
comiss xmm6, xmm0
cmovbe rcx, rax
lea rax, [rbp + 0x2a0]
comiss xmm0, dword [0x1801368d4]
cmovbe rax, rcx
movss xmm5, dword [rax]
movss dword [rbp + 0x2a8], xmm0
movd xmm3, dword [0x1801520cc]
cvtdq2ps xmm3, xmm3
mov dword [rsp + 0x20], 0x3f800000
mov dword [rbp + 0x2a0], 0
lea rcx, [rbp + 0x2a0]
lea rax, [rbp + 0x2a8]
comiss xmm6, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x20]
comiss xmm0, dword [0x1801368d4]
cmovbe rax, rcx
movss xmm1, dword [rax]
movaps xmm0, xmm1
addss xmm0, xmm1
movss xmm4, dword [0x180136934]
movaps xmm2, xmm4
subss xmm2, xmm0
mulss xmm1, xmm1
mulss xmm2, xmm1
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
subss xmm0, xmm3
mulss xmm2, xmm0
addss xmm2, xmm3
cvttss2si edx, xmm2
movaps xmm0, xmm5
addss xmm0, xmm5
subss xmm4, xmm0
mulss xmm5, xmm5
mulss xmm4, xmm5
movd xmm0, r14d
cvtdq2ps xmm0, xmm0
subss xmm0, xmm7
mulss xmm4, xmm0
addss xmm4, xmm7
cvttss2si ecx, xmm4
call qword [sym.imp.USER32.dll_SetCursorPos]
mov al, 1
jmp 0x18008e08b
cmp byte [rsi + 0x568], 0
je 0x18008e042
mov dword [0x18014f2e8], 0x10
mov qword [0x18014f2ec], 2
mov qword [0x18014f2f8], rdi
mov r8d, 0x28
lea rdx, [0x18014f2e0]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov byte [rsi + 0x568], 0
mov al, 1
jmp 0x18008e08b
cmp byte [rsi + 0x568], dil
je 0x18008e089
mov dword [0x18014f2e8], 0x10
mov qword [0x18014f2ec], 2
mov qword [0x18014f2f8], rdi
mov r8d, 0x28
lea rdx, [0x18014f2e0]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov byte [rsi + 0x568], dil
xor al, al
mov byte [0x1801520d4], al
cmp dword [0x18014f2c8], 0xffffffff
jne 0x18008e0e4
cmp byte [rsi + 0x568], 0
je 0x18008e0dd
mov dword [0x18014f2e8], 0x10
mov qword [0x18014f2ec], 2
mov qword [0x18014f2f8], rdi
mov r8d, 0x28
lea rdx, [0x18014f2e0]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov byte [rsi + 0x568], 0
mov byte [0x1801520d4], 0
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.1800d1810
lea r11, [rsp + 0x3f0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret