Function at 0x180069880
Capabilities:
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov rax, qword [0x18019e008]
xor rax, rsp
mov qword [rbp + 0xe0], rax
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor r14d, r14d
movabs r15, 0xd80958fc74e988a6
test ax, ax
je 0x180069a6a
movabs rax, 0x50fac3a3e030a6e1
mov qword [rsp + 0x20], r14
mov qword [0x1802008b8], rax
mov eax, dword [0x1801c8ef8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x20]
mov qword [0x1801b7a88], rax
mov qword [rsp + 0x210], rsi
mov dword [0x1801b79c0], r14d
mov dword [0x1801b79b0], 1
call fcn.1800ba210
xor ecx, ecx
mov edi, dword [rax]
mov edx, edi
mov byte [0x1801c50be], r14b
call qword [0x1801c5bd0]
mov dword [0x1801b79b0], r14d
mov dword [0x1801b79c0], r14d
mov qword [0x1802008b8], r15
call fcn.1800ba210
xor edx, edx
mov ecx, dword [rax]
call fcn.180064240
test eax, eax
mov dword [0x1801b79b0], r14d
mov dword [0x1801b79c0], r14d
setne bl
mov qword [0x1802008b8], r15
call fcn.1800ba210
mov edx, 1
mov r8d, edx
mov esi, dword [rax]
mov ecx, esi
call fcn.180064090
mov qword [rsp + 0x20], r14
movabs rax, 0x428ca6dbd1094446
mov qword [0x1802008b8], rax
mov dword [rsp + 0x20], esi
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x20], r14
mov qword [0x1801b7a88], rax
mov dword [rsp + 0x20], r14d
mov rax, qword [rsp + 0x20]
mov qword [0x1801b7a90], rax
mov dword [0x1801b79c0], r14d
mov dword [0x1801b79b0], 2
call fcn.1800ba210
mov qword [rsp + 0x20], r14
movabs rax, 0x423de3854bb50894
mov qword [0x1802008b8], rax
mov dword [rsp + 0x20], r14d
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x20], r14
mov qword [0x1801b7a88], rax
mov dword [rsp + 0x20], edi
mov rax, qword [rsp + 0x20]
mov qword [0x1801b7a90], rax
mov dword [0x1801b79c0], r14d
mov dword [0x1801b79b0], 2
call fcn.1800ba210
mov edx, edi
xor ecx, ecx
call qword [0x1801c5bd0]
test bl, bl
je 0x180069a59
mov dword [0x1801b79b0], r14d
mov dword [0x1801b79c0], r14d
mov qword [0x1802008b8], r15
call fcn.1800ba210
xor edx, edx
mov ecx, dword [rax]
call fcn.180064480
mov ecx, eax
jmp 0x180069a5b
mov ecx, esi
xor edx, edx
call fcn.180063fc0
mov rsi, qword [rsp + 0x210]
cmp byte [0x1801c5375], 1
jne 0x180069a88
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180069a88
call fcn.1800a7e40
cmp byte [0x1801c5062], 1
jne 0x180069aa6
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180069aa6
call fcn.1800a7ba0
call qword [sym.imp.WINMM.dll_timeGetTime]
sub eax, dword [0x1801c50fc]
cmp eax, 0x1f4
jbe 0x180069fa5
cmp byte [0x1801c50e3], 1
jne 0x180069ae4
mov ecx, 0x72
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180069ae4
cmp byte [0x1801c50bc], 1
setne byte [0x1801c50bc]
cmp byte [0x1801c5180], 1
jne 0x180069b6e
mov ecx, 0x73
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180069b6e
movabs rax, 0xa8fdb297a8d25fba
mov dword [0x1801b79b0], r14d
mov qword [0x1802008b8], rax
mov dword [0x1801b79c0], r14d
call fcn.1800ba210
mov ebx, r14d
movabs rdi, 0xbe4390cb40b3e627
mov qword [rsp + 0x20], r14
mov dword [rsp + 0x20], ebx
mov rax, qword [rsp + 0x20]
mov qword [0x1801b7a88], rax
mov dword [0x1801b79c0], r14d
mov qword [0x1802008b8], rdi
mov dword [0x1801b79b0], 1
call fcn.1800ba210
inc ebx
cmp ebx, 0x3e8
jl 0x180069b32
cmp byte [0x1801c500c], 1
jne 0x180069f4b
mov ecx, 0x76
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180069f4b
mov dword [rsp + 0x30], 0x92a27487
mov dword [rsp + 0x34], 0x958a4a8f
mov dword [rsp + 0x38], 0xf9e6aa4b
mov dword [rsp + 0x3c], 0x84bd7bfd
mov dword [rsp + 0x40], 0xa2719263
mov dword [rsp + 0x44], 0x8bb05fd7
mov dword [rsp + 0x48], 0x440e4788
mov dword [rsp + 0x4c], 0x4e875f73
mov dword [rsp + 0x50], 0xf9dcbf2d
mov dword [rsp + 0x54], 0xd8df3c3c
mov dword [rsp + 0x58], 0x99b507ea
mov dword [rsp + 0x5c], 0xdd5df8d9
mov dword [rsp + 0x60], 0xdfe37640
mov dword [rsp + 0x64], 0x678b81b1
mov dword [rsp + 0x68], 0x19044ee0
mov dword [rsp + 0x6c], 0xcd274149
mov dword [rsp + 0x70], 0x94117305
mov dword [rsp + 0x74], 0x3813fc08
mov dword [rsp + 0x78], 0x1b06d571
mov dword [rsp + 0x7c], 0xbfe256d4
mov dword [rbp - 0x80], 0x5ef9fec4
mov dword [rbp - 0x7c], 0x22d8fe39
mov dword [rbp - 0x78], 0x3656c8c1
mov dword [rbp - 0x74], 0x99aeeb3b
mov dword [rbp - 0x70], 0xbfd21232
mov dword [rbp - 0x6c], 0x88374054
mov dword [rbp - 0x68], 0xd205520e
mov dword [rbp - 0x64], 0x83839c4
mov dword [rbp - 0x60], 0x47757124
mov dword [rbp - 0x5c], 0xdc4db296
mov dword [rbp - 0x58], 0xc1b3c3d1
mov dword [rbp - 0x54], 0xcb96392f
mov dword [rbp - 0x50], 0x97ea20b8
mov dword [rbp - 0x4c], 0xaf3696a1
mov dword [rbp - 0x48], 0x2b5ef5ec
mov dword [rbp - 0x44], 0x917f6c8c
mov dword [rbp - 0x40], 0x57a4368c
mov dword [rbp - 0x3c], 0x45cd9cf3
mov dword [rbp - 0x38], 0x13532244
mov dword [rbp - 0x34], 0x2be6766b
mov dword [rbp - 0x30], 0x78a97cd0
mov dword [rbp - 0x2c], 0xefe7e2df
mov dword [rbp - 0x28], 0xa3d4d34
mov dword [rbp - 0x24], 0xdb1aa450
mov dword [rbp - 0x20], 0xbd248b55
mov dword [rbp - 0x1c], 0x476bf155
mov dword [rbp - 0x18], 0x1d073a89
mov dword [rbp - 0x14], 0x555af99a
mov dword [rbp - 0x10], 0x7846a318
mov dword [rbp - 0xc], 0xe284c527
mov dword [rbp - 8], 0x9d61e50f
mov dword [rbp - 4], 0xa89cb99e
mov dword [rbp], 0x3aabbbaa
mov dword [rbp + 4], 0xef951fbb
mov dword [rbp + 8], 0x12e82d3d
mov dword [rbp + 0xc], 0x5a96ba4
mov dword [rbp + 0x10], 0xbfefff6d
mov dword [rbp + 0x14], 0x394f415c
mov dword [rbp + 0x18], 0x83bf0278
mov dword [rbp + 0x1c], 0xfad1f1c9
mov dword [rbp + 0x20], 0xaf113f99
mov dword [rbp + 0x24], 0xc0a3098d
mov dword [rbp + 0x28], 0x969c3d67
mov dword [rbp + 0x2c], 0x7f229f94
mov dword [rbp + 0x30], 0x84d6fafd
mov dword [rbp + 0x34], 0x624fe830
mov dword [rbp + 0x38], 0x9d1f17e6
mov dword [rbp + 0x3c], 0xc78d71b4
mov dword [rbp + 0x40], 0xd1d5f52b
mov dword [rbp + 0x44], 0x9d07f764
mov dword [rbp + 0x48], 0x7fd62962
mov dword [rbp + 0x4c], 0xdbbd7280
mov dword [rbp + 0x50], 0x61012683
mov dword [rbp + 0x54], 0x5fc3c11
mov dword [rbp + 0x58], 0xc472fe2
mov dword [rbp + 0x5c], 0xa914799
mov dword [rbp + 0x60], 0xc734385a
mov dword [rbp + 0x64], 0x6a6c02e0
mov dword [rbp + 0x68], 0x6e7dddec
mov dword [rbp + 0x6c], 0xb1ca77b1
mov dword [rbp + 0x70], 0xa284510b
movabs rax, 0xd24d37cc275948cc
mov dword [rbp + 0x74], 0x4dd2dc56
mov qword [0x1802008b8], rax
lea rax, str.WEAPON_TECPISTOL
mov qword [0x1801b7a88], rax
mov dword [rbp + 0x78], 0x42bf8a85
mov dword [rbp + 0x7c], 0x7f7497e5
mov dword [rbp + 0x80], 0x6d544c99
mov dword [rbp + 0x84], 0x63ab0442
mov dword [rbp + 0x88], 0x781fe4a
mov dword [rbp + 0x8c], 0xb62d1f67
mov dword [rbp + 0x90], 0xdb26713a
mov dword [rbp + 0x94], 0x93e220bd
mov dword [rbp + 0x98], 0xa0973d5e
mov dword [rbp + 0x9c], 0xfdbc8a50
mov dword [rbp + 0xa0], 0x497facc3
mov dword [rbp + 0xa4], 0x24b17070
mov dword [rbp + 0xa8], 0x2c3731d9
mov dword [rbp + 0xac], 0xab564b93
mov dword [rbp + 0xb0], 0x787f0bb
mov dword [rbp + 0xb4], 0xba45e8b8
mov dword [rbp + 0xb8], 0x23c9f95c
mov dword [rbp + 0xbc], 0x34a67b97
mov dword [rbp + 0xc0], 0x60ec506
mov dword [rbp + 0xc4], 0xfbab5776
mov dword [rbp + 0xc8], 0xba536372
mov dword [rbp + 0xcc], 0x184140a1
mov dword [rbp + 0xd0], 0xbfefff6d
mov dword [0x1801b79c0], r14d
mov dword [0x1801b79b0], 1
call fcn.1800ba210
mov ebx, r14d
lea rdi, [rsp + 0x30]
mov ecx, dword [rax]
mov dword [rbp + 0xd4], ecx
nop word [rax + rax]
mov dword [0x1801b79b0], r14d
mov dword [0x1801b79c0], r14d
mov qword [0x1802008b8], r15
call fcn.1800ba210
mov edx, dword [rdi]
mov r9d, 1
mov r8d, 0x270f
mov ecx, dword [rax]
call qword [0x1801c5c08]
inc ebx
lea rdi, [rdi + 4]
cmp ebx, 0x6a
jb 0x180069f10
cmp byte [0x1801c5329], 1
jne 0x180069f72
mov ecx, 0x77
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180069f72
cmp byte [0x1801c50c5], 1
setne byte [0x1801c50c5]
cmp byte [0x1801c5056], 1
jne 0x180069f99
mov ecx, 0x78
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180069f99
cmp byte [0x1801c5222], 1
setne byte [0x1801c5222]
call qword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x1801c50fc], eax
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.1800e99a0
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret