Function at 0x180004c00
Capabilities:
Check for unmoving mouse cursor
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x130
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1800a7048]
xor rax, rsp
mov qword [rsp + 0x88], rax
mov rdi, rdx
cmp byte [0x1800a99b4], 0
jne 0x180004cc4
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x1800a99b8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x1800a99c0], rax
mov byte [0x1800a99b4], 1
jmp 0x180004ccb
mov rax, qword [0x1800a99c0]
cmp byte [rax + 0x4c8], 0
je 0x180004ee2
xor edx, edx
lea rcx, str.LWJGL
call qword [sym.imp.USER32.dll_FindWindowA]
mov r12, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, r12
jne 0x180004ee2
mov rcx, rdi
call fcn.180014fa0
mov rbp, rax
mov rcx, rdi
call fcn.180015970
mov r13, rax
mov rcx, rdi
call fcn.180015300
mov rsi, rax
mov rcx, rdi
call fcn.180015150
mov r15, rax
test rbp, rbp
je 0x180004ee2
test rax, rax
je 0x180004ee2
cmp byte [0x1800a99b4], 0
jne 0x180004d86
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x1800a99b8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x1800a99c0], rax
mov byte [0x1800a99b4], 1
mov rax, qword [0x1800a99c0]
cmp byte [rax + 0x4d4], 0
je 0x180004da9
mov rdx, rdi
mov rcx, r13
call fcn.1800122f0
test al, al
jne 0x180004ee2
cmp byte [0x1800a99b4], 0
jne 0x180004df8
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x1800a99b8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x1800a99c0], rax
mov byte [0x1800a99b4], 1
mov rax, qword [0x1800a99c0]
cmp byte [rax + 0x4d5], 0
je 0x180004e2b
mov rdx, rdi
mov rcx, rbp
call fcn.180014730
mov rdx, rdi
mov rcx, rax
call fcn.180012100
test al, al
jne 0x180004e2b
test rsi, rsi
je 0x180004ee2
cmp byte [0x1800a99b4], 0
jne 0x180004e7a
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x1800a99b8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x1800a99c0], rax
mov byte [0x1800a99b4], 1
mov r14d, 1
mov rax, qword [0x1800a99c0]
cmp byte [rax + 0x4d6], 0
je 0x180004f56
test rsi, rsi
je 0x180004f5b
mov rbx, qword [0x1800a99f0]
mov r8d, r14d
lea rdx, str.net_minecraft_client_gui_inventory_GuiInventory
lea rcx, [rsp + 0x48]
call fcn.18001e0e0
mov rdx, rax
mov rcx, rbx
call fcn.180001ef0
test rax, rax
je 0x180004ee2
mov rcx, qword [rdi]
mov r9, qword [rcx + 0x100]
mov r8, rax
mov rdx, rsi
mov rcx, rdi
call r9
test al, al
jne 0x180004f5b
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.18004a310
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
test rsi, rsi
jne 0x180004ee2
cmp byte [0x1800a99b4], 0
jne 0x180004faa
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x1800a99b8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x1800a99c0], rax
mov byte [0x1800a99b4], r14b
mov rax, qword [0x1800a99c0]
cmp byte [rax + 0x4d7], 0
je 0x1800051ed
xor r14d, r14d
mov r8, rdi
lea rdx, [rsp + 0x30]
mov rcx, rbp
call fcn.180013440
mov rdx, rdi
mov rcx, rbp
call fcn.180012f30
movss dword [rsp + 0x68], xmm0
mov r8, rdi
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.1800165a0
nop
mov rsi, qword [rsp + 0x70]
mov rbx, rsi
mov r15, qword [rsp + 0x78]
cmp rsi, r15
je 0x180005104
movsd xmm12, qword [rsp + 0x40]
movsd xmm13, qword [rsp + 0x30]
movss xmm9, dword [0x1800985f0]
movss xmm11, dword [0x180098294]
movsd xmm14, qword [0x1800981f0]
movsd xmm15, qword [0x180098218]
movss xmm7, dword [0x1800982a0]
movss xmm8, dword [0x1800982e4]
movss xmm10, dword [0x1800982e0]
nop word [rax + rax]
mov rax, qword [rdi]
mov r9, qword [rax + 0xc0]
mov r8, rbp
mov rdx, qword [rbx]
mov rcx, rdi
call r9
test al, al
jne 0x1800050f7
mov r8, rdi
lea rdx, [rsp + 0x30]
mov rcx, qword [rbx]
call fcn.180013440
movaps xmm1, xmm13
subsd xmm1, qword [rsp + 0x30]
movaps xmm0, xmm12
subsd xmm0, qword [rsp + 0x40]
cvtsd2ss xmm0, xmm0
cvtsd2ss xmm1, xmm1
call fcn.180069a80
mulss xmm0, xmm11
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
divsd xmm1, xmm14
subsd xmm1, xmm15
cvtpd2ps xmm6, xmm1
movaps xmm0, xmm6
subss xmm0, dword [rsp + 0x68]
movaps xmm1, xmm7
call fcn.18006a8c4
comiss xmm0, xmm11
jb 0x1800050e1
addss xmm0, xmm8
comiss xmm10, xmm0
jbe 0x1800050eb
addss xmm0, xmm7
andps xmm6, xmm9
comiss xmm0, xmm6
jb 0x1800050f7
mov r14, qword [rbx]
add rbx, 8
cmp rbx, r15
jne 0x180005060
test rsi, rsi
je 0x180005145
mov rdx, qword [rsp + 0x80]
sub rdx, rsi
and rdx, 0xfffffffffffffff8
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000513d
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800053aa
mov rcx, rsi
call fcn.18004a6ec
test r14, r14
je 0x1800051e7
mov rdx, rdi
mov rcx, rbp
call fcn.180014350
lea ebx, [rax - 4]
mov rdx, rdi
mov rcx, rbp
call fcn.180014470
cmp eax, ebx
jl 0x180005171
inc dword [0x1800a9a20]
mov rdx, rdi
mov rcx, r14
call fcn.180014350
lea ebx, [rax - 4]
mov rdx, rdi
mov rcx, r14
call fcn.180014470
cmp eax, ebx
jl 0x180005194
inc dword [0x1800a9a24]
mov rdx, rdi
mov rcx, r13
call fcn.180012610
test al, al
je 0x1800051e7
mov edx, 0x5dc
mov ecx, 0x1f4
call fcn.180020020
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x1800a9a28]
cmp rax, rbx
jbe 0x1800051e7
mov eax, dword [0x1800a9a20]
cmp eax, 2
jl 0x180005272
mov byte [0x1800a9a0a], 1
mov dword [0x1800a9a20], 0
mov r14d, 1
cmp byte [0x1800a99b4], 0
jne 0x18000523c
lea r8, str.win32
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [0x1800a99b8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x1800a99c0], rax
mov byte [0x1800a99b4], 1
mov rax, qword [0x1800a99c0]
mov ecx, dword [rax + 0x4d0]
call fcn.180004a50
mov ebx, eax
mov dword [rsp + 0x68], eax
mov ecx, r14d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x1800052b9
mov byte [0x1800a9a09], 0
mov ecx, ebx
jmp 0x180004ee7
mov ecx, dword [0x1800a9a24]
cmp ecx, 2
jl 0x180005293
mov byte [0x1800a9a0a], 1
mov dword [0x1800a9a24], 0
jmp 0x1800051e7
mov r14d, 1
test eax, eax
jne 0x1800051ed
movzx eax, byte [0x1800a9a0a]
test ecx, ecx
cmove eax, r14d
mov byte [0x1800a9a0a], al
jmp 0x1800051ed
cmp byte [0x1800a9a09], 0
jne 0x1800052d1
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1800a9a09], 1
mov rdx, qword [0x1800a9a38]
cmp rdx, qword [0x1800a9a40]
je 0x1800052ed
mov dword [rdx], ebx
add qword [0x1800a9a38], 4
jmp 0x1800052fe
lea r8, [rsp + 0x68]
lea rcx, [0x1800a9a30]
call fcn.180005410
lea rcx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetCursorPos]
xor r9d, r9d
mov r8, r14
mov edx, 0x201
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8, r14
mov edx, 0x202
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1800a9a0a], 0
je 0x180004eed
lea rcx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetCursorPos]
xor r9d, r9d
mov r8, r14
mov edx, 0x204
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8, r14
mov edx, 0x205
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1800a9a0a], 0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x1800a9a28], rax
jmp 0x180004eed
call fcn.1800510f0
int3