Function at 0x180004e80
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x130
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1800980c0]
xor rax, rsp
mov qword [rsp + 0x88], rax
mov rdi, rdx
cmp byte [0x18009a7b4], 0
jne 0x180004f44
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x18009a7b8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x18009a7c0], rax
mov byte [0x18009a7b4], 1
jmp 0x180004f4b
mov rax, qword [0x18009a7c0]
cmp byte [rax + 0x4cc], 0
je 0x180005661
xor edx, edx
lea rcx, str.LWJGL
call qword [sym.imp.USER32.dll_FindWindowA]
mov r15, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, r15
jne 0x180005661
mov rcx, rdi
call fcn.18000c7d0
mov r14, rax
mov rcx, rdi
call fcn.18000cce0
mov r13, rax
mov rcx, rdi
call fcn.18000cb30
mov rbp, rax
mov rcx, rdi
call fcn.18000c980
mov r12, rax
test r14, r14
je 0x180005661
test rax, rax
je 0x180005661
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ebx, ax
shr ebx, 0xf
and bl, 1
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx esi, ax
shr esi, 0xf
and sil, 1
cmp byte [0x18009a7b4], 0
jne 0x18000502f
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x18009a7b8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x18009a7c0], rax
mov byte [0x18009a7b4], 1
mov rax, qword [0x18009a7c0]
cmp byte [rax + 0x4dc], 0
je 0x1800050ff
test bl, bl
je 0x1800050ff
test sil, sil
je 0x1800050ff
mov rdx, rdi
mov rcx, r13
call fcn.18000a670
test al, al
jne 0x180005661
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x180005083
mov byte [0x18009a802], 0
jmp 0x180005661
cmp byte [0x18009a802], 0
jne 0x180005093
mov byte [0x18009a802], 1
xor r9d, r9d
mov edx, 0x204
mov r8d, 2
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
mov edx, 0x201
mov r8d, 1
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
mov edx, 0x205
mov r8d, 2
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
mov edx, 0x202
mov r8d, 1
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, 0x28
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180005661
cmp byte [0x18009a7b4], 0
jne 0x18000514e
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x18009a7b8], rax
xor esi, esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x18009a7c0], rax
mov byte [0x18009a7b4], 1
jmp 0x180005150
xor esi, esi
mov rax, qword [0x18009a7c0]
cmp byte [rax + 0x4d8], 0
je 0x180005173
mov rdx, rdi
mov rcx, r13
call fcn.18000a670
test al, al
jne 0x180005527
cmp byte [0x18009a7b4], 0
jne 0x1800051be
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x18009a7b8], rax
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x18009a7c0], rax
mov byte [0x18009a7b4], 1
mov rax, qword [0x18009a7c0]
cmp byte [rax + 0x4d9], 0
je 0x1800051f1
mov rdx, rdi
mov rcx, r14
call fcn.18000c320
mov rdx, rdi
mov rcx, rax
call fcn.18000a590
test al, al
jne 0x1800051f1
test rbp, rbp
je 0x180005527
cmp byte [0x18009a7b4], 0
jne 0x18000523c
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x18009a7b8], rax
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x18009a7c0], rax
mov byte [0x18009a7b4], 1
mov rax, qword [0x18009a7c0]
cmp byte [rax + 0x4da], 0
je 0x18000551e
test rbp, rbp
je 0x1800052a5
mov rbx, qword [0x18009a7e8]
mov r8d, 1
lea rdx, str.net_minecraft_client_gui_inventory_GuiInventory
lea rcx, [rsp + 0x50]
call fcn.180014c90
mov rdx, rax
mov rcx, rbx
call fcn.180001e90
test rax, rax
je 0x180005527
mov rcx, qword [rdi]
mov r9, qword [rcx + 0x100]
mov r8, rax
mov rdx, rbp
mov rcx, rdi
call r9
test al, al
je 0x180005527
cmp byte [0x18009a7b4], 0
jne 0x1800052f0
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x18009a7b8], rax
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x18009a7c0], rax
mov byte [0x18009a7b4], 1
mov rax, qword [0x18009a7c0]
cmp byte [rax + 0x4db], 0
je 0x18000555d
mov rbp, rsi
mov r8, rdi
lea rdx, [rsp + 0x38]
mov rcx, r14
call fcn.18000b390
mov rdx, rdi
mov rcx, r14
call fcn.18000b150
movss dword [rsp + 0x30], xmm0
mov r8, rdi
lea rdx, [rsp + 0x70]
mov rcx, r12
call fcn.18000ce90
nop
mov rsi, qword [rsp + 0x70]
mov rbx, rsi
mov r12, qword [rsp + 0x78]
cmp rsi, r12
je 0x180005444
movsd xmm12, qword [rsp + 0x48]
movsd xmm13, qword [rsp + 0x38]
movdqa xmm9, xmmword [0x18008c120]
movss xmm11, dword [0x18008be08]
movsd xmm14, qword [0x18008bd80]
movsd xmm15, qword [0x18008bda0]
movss xmm7, dword [0x18008be10]
movss xmm8, dword [0x18008be54]
movss xmm10, dword [0x18008be50]
nop dword [rax + rax]
mov rax, qword [rdi]
mov r9, qword [rax + 0xc0]
mov r8, r14
mov rdx, qword [rbx]
mov rcx, rdi
call r9
test al, al
jne 0x180005437
mov r8, rdi
lea rdx, [rsp + 0x38]
mov rcx, qword [rbx]
call fcn.18000b390
movaps xmm1, xmm13
subsd xmm1, qword [rsp + 0x38]
movaps xmm0, xmm12
subsd xmm0, qword [rsp + 0x48]
cvtsd2ss xmm0, xmm0
cvtsd2ss xmm1, xmm1
call fcn.18005e658
mulss xmm0, xmm11
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
divsd xmm1, xmm14
subsd xmm1, xmm15
cvtpd2ps xmm6, xmm1
movaps xmm0, xmm6
subss xmm0, dword [rsp + 0x30]
movaps xmm1, xmm7
call fcn.18005f4a4
comiss xmm0, xmm11
jb 0x180005421
addss xmm0, xmm8
comiss xmm10, xmm0
jbe 0x18000542b
addss xmm0, xmm7
andps xmm6, xmm9
comiss xmm0, xmm6
jb 0x180005437
mov rbp, qword [rbx]
add rbx, 8
cmp rbx, r12
jne 0x1800053a0
test rsi, rsi
je 0x180005485
mov rdx, qword [rsp + 0x80]
sub rdx, rsi
and rdx, 0xfffffffffffffff8
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000547d
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800056ca
mov rcx, rsi
call fcn.18004004c
test rbp, rbp
je 0x18000555d
mov rdx, rdi
mov rcx, r14
call fcn.18000bf40
lea ebx, [rax - 4]
mov rdx, rdi
mov rcx, r14
call fcn.18000c060
cmp eax, ebx
jl 0x1800054b1
inc dword [0x18009a810]
mov rdx, rdi
mov rcx, rbp
call fcn.18000bf40
lea ebx, [rax - 4]
mov rdx, rdi
mov rcx, rbp
call fcn.18000c060
cmp eax, ebx
jl 0x1800054d4
inc dword [0x18009a814]
mov rdx, rdi
mov rcx, r13
call fcn.18000a990
test al, al
je 0x18000555d
mov edx, 0x4b0
mov ecx, 0x1f4
call fcn.180016d10
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x18009a818]
cmp rax, rbx
jbe 0x18000555d
mov eax, dword [0x18009a810]
cmp eax, 2
jl 0x180005537
mov dword [0x18009a810], 0
jmp 0x180005556
test rbp, rbp
je 0x1800052a5
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180005661
mov ecx, dword [0x18009a814]
cmp ecx, 2
jl 0x18000554e
mov dword [0x18009a814], 0
jmp 0x180005556
test eax, eax
jne 0x18000555d
test ecx, ecx
jne 0x18000555d
mov byte [0x18009a803], 1
cmp byte [0x18009a7b4], 0
jne 0x1800055ac
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x18009a7b8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x18009a7c0], rax
mov byte [0x18009a7b4], 1
mov rcx, qword [0x18009a7c0]
mov ecx, dword [rcx + 0x4d4]
call fcn.180004cc0
mov ebx, eax
mov dword [rsp + 0x30], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x1800055e5
mov byte [0x18009a802], 0
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180005661
cmp byte [0x18009a802], 0
jne 0x1800055fd
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x18009a802], 1
mov rdx, qword [0x18009a828]
cmp rdx, qword [0x18009a830]
je 0x180005619
mov dword [rdx], ebx
add qword [0x18009a828], 4
jmp 0x18000562a
lea r8, [rsp + 0x30]
lea rcx, [0x18009a820]
call fcn.180005730
xor r8d, r8d
mov edx, ebx
mov rcx, r15
call fcn.180016e10
cmp byte [0x18009a803], 0
je 0x180005661
mov r8b, 1
mov edx, ebx
mov rcx, r15
call fcn.180016e10
mov byte [0x18009a803], 0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x18009a818], rax
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.18003fc80
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.180045ed4
int3