Function at 0x18005aa90
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x218]
sub rsp, 0x2f0
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [0x18009c010]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r14, rcx
mov qword [rsp + 0x58], rcx
mov edx, dword [0x18009c9b4]
mov rax, qword gs:[0x58]
mov r12d, 4
mov rbx, qword [rax + rdx*8]
mov qword [rsp + 0x60], rbx
mov eax, dword [rbx + r12]
cmp dword [0x1800af268], eax
jle 0x18005ab23
lea rcx, [0x1800af268]
call fcn.180061dc0
cmp dword [0x1800af268], 0xffffffff
jne 0x18005ab23
lea rcx, [0x1800af268]
call fcn.180061d60
mov eax, dword [rbx + r12]
cmp dword [0x1800af274], eax
jle 0x18005ab50
lea rcx, [0x1800af274]
call fcn.180061dc0
cmp dword [0x1800af274], 0xffffffff
jne 0x18005ab50
lea rcx, [0x1800af274]
call fcn.180061d60
mov eax, dword [rbx + r12]
cmp dword [0x1800af26c], eax
jle 0x18005ab89
lea rcx, [0x1800af26c]
call fcn.180061dc0
cmp dword [0x1800af26c], 0xffffffff
jne 0x18005ab89
lea rcx, [0x1800632f0]
call fcn.18006187c
lea rcx, [0x1800af26c]
call fcn.180061d60
lea rcx, str.Execution_Type
call fcn.180035e10
mov rax, qword [0x18009ca28]
mov rcx, qword [rax + 0x3ed0]
movss xmm8, dword [0x180091770]
cmp byte [rcx + 0xbb], 0
jne 0x18005abcb
mov eax, dword [rcx + 0x1b4]
neg eax
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.1800392d0
cmp dword [r14 + 0x80], 0
sete dl
lea rcx, str.On_Player1
call fcn.180038950
test al, al
je 0x18005abf1
mov dword [r14 + 0x80], 0
movss xmm7, dword [0x1800918a0]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180015ba0
cmp dword [r14 + 0x80], 1
sete dl
lea rcx, str.On_Player2
call fcn.180038950
test al, al
je 0x18005ac2a
mov dword [r14 + 0x80], 1
mov rax, qword [0x18009ca28]
mov rcx, qword [rax + 0x3ed0]
cmp byte [rcx + 0xbb], 0
jne 0x18005ac57
mov eax, dword [rcx + 0x1b4]
neg eax
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.1800392d0
lea rcx, str.Script_Calling_Type
call fcn.180035e10
mov rax, qword [0x18009ca28]
mov rcx, qword [rax + 0x3ed0]
cmp byte [rcx + 0xbb], 0
jne 0x18005ac90
mov eax, dword [rcx + 0x1b4]
neg eax
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.1800392d0
cmp dword [0x18009c2b4], 1
sete dl
lea rcx, str.Default
call fcn.180038950
test al, al
je 0x18005acbb
mov dword [0x18009c2b4], 1
mov byte [0x1800aec80], 0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180015ba0
cmp dword [0x18009c2b4], 2
sete dl
lea rcx, str.Special_Moves
call fcn.180038950
test al, al
je 0x18005acf1
mov dword [0x18009c2b4], 2
mov byte [0x1800aec80], 0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180015ba0
lea rcx, str.Unlike_previous_MKs__introduction_of_kameos_has_changed_the_way_special_moves_can_be_executed__use_this_mode_to_call_only_all_available_special_moves_from_all_players.
call fcn.180055b90
mov rax, qword [0x18009ca28]
mov rcx, qword [rax + 0x3ed0]
cmp byte [rcx + 0xbb], 0
jne 0x18005ad35
mov eax, dword [rcx + 0x1b4]
neg eax
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.1800392d0
lea rcx, str.Script_Source__.MKO_
call fcn.180035e10
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180015ba0
lea rcx, str..MKO_file_names_can_be_found_in_MKScript_folder._Alternatively_add_.mko_to_names_from_Character_and_Kameo_tabs.
call fcn.180055b90
movss xmm0, dword [0x180091884]
call fcn.180015c50
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea rdi, [0x1800ad370]
mov r8, rdi
xor edx, edx
lea rcx, str.scriptsrc
call fcn.18003f300
mov rcx, qword [0x18009ca28]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov r8, qword [rcx + 0x3ed0]
movsxd rdx, dword [r8 + 0x1c8]
mov rax, qword [r8 + 0x1d0]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1bc], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1c8], eax
mov eax, dword [rbx + r12]
cmp dword [0x1800aeee8], eax
jle 0x18005ae2a
lea rcx, [0x1800aeee8]
call fcn.180061dc0
cmp dword [0x1800aeee8], 0xffffffff
jne 0x18005ae2a
mov rax, qword [0x18009cdc8]
mov qword [0x1800aef00], rax
lea rcx, [0x1800aeee8]
call fcn.180061d60
mov rax, qword [0x1800aef00]
test rax, rax
je 0x18005bcd0
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call rax
mov qword [r14 + 0x2a0], rax
test rax, rax
je 0x18005bcdb
lea r15, [0x1800aec80]
lea rsi, [0x1800aef40]
mov eax, dword [0x18009c2b4]
cmp eax, 1
jne 0x18005b332
lea rcx, str.Function_List
call fcn.180035b70
mov eax, dword [rbx + r12]
cmp dword [0x1800af398], eax
jle 0x18005af10
lea rcx, [0x1800af398]
call fcn.180061dc0
cmp dword [0x1800af398], 0xffffffff
jne 0x18005af10
mov qword [0x1800af250], 0
mov qword [0x1800af258], 0
mov byte [0x1800af150], 0
mov dword [0x1800af260], 0
mov r8d, 0xff
lea rdx, [0x18008aeee]
lea rcx, [0x1800af150]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x1800af24f], 0
lea rcx, [0x1800af150]
call fcn.180006a40
nop
lea rcx, [0x1800632c0]
call fcn.18006187c
nop
lea rcx, [0x1800af398]
call fcn.180061d60
lea rcx, str.Search
call fcn.180035b70
movss xmm0, dword [0x180091884]
call fcn.180015c50
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x1800af150]
xor edx, edx
lea rcx, str.fnlist
call fcn.18003f300
test al, al
je 0x18005af81
lea rcx, [0x1800af150]
call fcn.180006a40
mov rbx, qword [0x18009ca28]
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov r8, qword [rbx + 0x3ed0]
movsxd rdx, dword [r8 + 0x1c8]
mov rax, qword [r8 + 0x1d0]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1bc], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1c8], eax
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x44], 0x42fa0000
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rbx, qword [rbx + 0x3ed0]
movsxd rcx, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + rcx*4 - 4]
xor edx, edx
lea rcx, str.list
call fcn.180006060
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x3f18], eax
jne 0x18005b026
lea r8, str.list
mov edx, 0xb
mov ecx, eax
call fcn.18001e120
mov dword [rsp + 0x20], 0
mov r9b, 1
lea r8, [rsp + 0x40]
mov edx, edi
lea rcx, str.list
call fcn.18000d2c0
xor r13d, r13d
mov rax, qword [r14 + 0x2a0]
cmp dword [rax + 0xc0], r13d
jle 0x18005b2b5
xor r12d, r12d
mov r14d, dword [0x1800af250]
nop word [rax + rax]
mov r15, qword [rax + 0xb8]
mov rsi, qword [r12 + r15 + 8]
test rsi, rsi
je 0x18005b282
test r14d, r14d
je 0x18005b0dd
xor edi, edi
mov rbx, qword [0x1800af258]
mov r9, qword [rbx + 8]
mov r8, qword [rbx]
cmp r8, r9
je 0x18005b0c5
mov rcx, rsi
cmp byte [r8], 0x2d
jne 0x18005b0bb
inc r8
call fcn.180005dc0
test rax, rax
jne 0x18005b282
jmp 0x18005b0c5
call fcn.180005dc0
test rax, rax
jne 0x18005b0dd
inc edi
add rbx, 0x10
cmp edi, r14d
jne 0x18005b093
cmp dword [0x1800af260], 0
jne 0x18005b282
cmp dword [0x1800ad368], r13d
sete dl
mov qword [rsp + 0x40], 0
lea r9, [rsp + 0x40]
xor r8d, r8d
mov rcx, rsi
call fcn.180047ab0
test al, al
je 0x18005b27b
mov rcx, qword [0x1800ad0a0]
mov rdx, qword [0x1800ad0a8]
cmp rcx, rdx
je 0x18005b12e
call fcn.18005d4f0
mov rax, qword [0x1800ad0a0]
mov qword [0x1800ad0a8], rax
mov dword [0x1800ad368], r13d
mov r8, qword [r12 + r15 + 8]
lea rdx, [0x18008bd7c]
lea rcx, [0x1800aec80]
call fcn.18001f520
xor edi, edi
mov rsi, qword [rsp + 0x58]
mov rdx, qword [rsi + 0x2a0]
mov rax, qword [rdx + 0xb8]
mov rcx, qword [r12 + rax + 0x10]
cmp dword [rcx + 0x30], edi
jle 0x18005b27b
xor ebx, ebx
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rdx + 0xb8]
mov rax, qword [r12 + rax + 0x10]
mov rax, qword [rax + 0x28]
mov eax, dword [rbx + rax]
test eax, eax
jle 0x18005b259
mov rcx, qword [rdx + 0x18]
dec eax
movsxd rdx, eax
add rdx, qword [rcx + 0xa0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x58], 0
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x18005b1d0
lea rcx, [rbp - 0x70]
call fcn.180052dd0
nop
mov rax, qword [0x1800ad0a8]
cmp rax, qword [0x1800ad0b0]
je 0x18005b20a
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.18005d380
add qword [0x1800ad0a8], 0x20
jmp 0x18005b21e
lea r8, [rbp - 0x70]
mov rdx, rax
lea rcx, [0x1800ad0a0]
call fcn.18005da80
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18005b259
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005b254
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b30e
call fcn.18006150c
inc edi
add rbx, 4
mov rdx, qword [rsi + 0x2a0]
mov rax, qword [rdx + 0xb8]
mov rcx, qword [rax + r12 + 0x10]
cmp edi, dword [rcx + 0x30]
jl 0x18005b180
mov r14d, dword [0x1800af250]
inc r13d
add r12, 0x38
mov rax, qword [rsp + 0x58]
mov rax, qword [rax + 0x2a0]
cmp r13d, dword [rax + 0xc0]
jl 0x18005b070
mov r14, qword [rsp + 0x58]
lea rsi, [0x1800aef40]
lea r15, [0x1800aec80]
call fcn.18000d4f0
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r15 + rax], 0
jne 0x18005b2c1
test rax, rax
je 0x18005b78e
mov rdx, r15
lea rcx, str.Selected_function:__s
call fcn.180035e10
call fcn.18005ceb0
lea rcx, [rsp + 0x40]
test al, al
je 0x18005b315
movaps xmm0, xmmword [0x180091bc0]
movups xmmword [rsp + 0x40], xmm0
lea rdx, str.This_function__probably__can_be_called.
call fcn.180035cb0
jmp 0x18005b78e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movaps xmm0, xmmword [0x180091bb0]
movups xmmword [rsp + 0x40], xmm0
lea rdx, str.This_function_will_probably_crash_the_game.
call fcn.180035cb0
jmp 0x18005b78e
cmp eax, 2
jne 0x18005b78e
lea rcx, str.Special_Moves_Function_List
call fcn.180035b70
mov eax, dword [rbx + r12]
cmp dword [0x1800af270], eax
jle 0x18005b3da
lea rcx, [0x1800af270]
call fcn.180061dc0
cmp dword [0x1800af270], 0xffffffff
jne 0x18005b3da
mov qword [0x1800af380], 0
mov qword [0x1800af388], 0
mov byte [0x1800af280], 0
mov dword [0x1800af390], 0
mov r8d, 0xff
lea rdx, [0x18008aeee]
lea rcx, [0x1800af280]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x1800af37f], 0
lea rcx, [0x1800af280]
call fcn.180006a40
nop
lea rcx, [0x180063290]
call fcn.18006187c
nop
lea rcx, [0x1800af270]
call fcn.180061d60
lea rcx, str.Search
call fcn.180035b70
movss xmm0, dword [0x180091884]
call fcn.180015c50
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x1800af280]
xor edx, edx
lea rcx, str.palist
call fcn.18003f300
test al, al
je 0x18005b44b
lea rcx, [0x1800af280]
call fcn.180006a40
mov rbx, qword [0x18009ca28]
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov r8, qword [rbx + 0x3ed0]
movsxd rdx, dword [r8 + 0x1c8]
mov rax, qword [r8 + 0x1d0]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1bc], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1c8], eax
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x54], 0x42fa0000
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rbx, qword [rbx + 0x3ed0]
movsxd rcx, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + rcx*4 - 4]
xor edx, edx
lea rcx, str.paolist
call fcn.180006060
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x3f18], eax
jne 0x18005b4f0
lea r8, str.paolist
mov edx, 0xb
mov ecx, eax
call fcn.18001e120
mov dword [rsp + 0x20], 0
mov r9b, 1
lea r8, [rsp + 0x50]
mov edx, edi
lea rcx, str.paolist
call fcn.18000d2c0
xor r12d, r12d
mov r8, qword [r14 + 0x4598]
mov rcx, qword [r14 + 0x45a0]
sub rcx, r8
movabs rax, 0xf83e0f83e0f83e1
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18005b75b
xor r13d, r13d
nop word [rax + rax]
lea rax, [r8 + r13]
lea rcx, [rbp - 0x50]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x18005b560
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x70], xmm1
mov qword [rbp - 0x80], rdx
mov qword [rbp - 0x78], rdx
mov r8, 0xffffffffffffffff
lea rax, [0x1800ad370]
inc r8
cmp byte [rax + r8], 0
jne 0x18005b5d6
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.180052dd0
nop
lea rdi, [rsp + 0x70]
mov r15, qword [rbp - 0x78]
cmp r15, 0x10
setae al
mov r14, qword [rsp + 0x70]
cmovae rdi, r14
lea rcx, [rsp + 0x70]
mov rsi, qword [rbp - 0x80]
test al, al
je 0x18005b61c
mov rbx, r14
add rsi, r14
jmp 0x18005b624
add rsi, rcx
lea rbx, [rsp + 0x70]
cmp rbx, rsi
je 0x18005b64d
sub rdi, rbx
nop dword [rax]
movsx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rdi + rbx], al
inc rbx
cmp rbx, rsi
jne 0x18005b630
mov r15, qword [rbp - 0x78]
mov r14, qword [rsp + 0x70]
lea rax, [rsp + 0x70]
cmp r15, 0x10
cmovae rax, r14
lea r8, [rbp + 0xbc]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x18005b677
inc rax
test ecx, ecx
jne 0x18005b664
test edx, edx
jne 0x18005b6cf
mov esi, dword [0x1800af380]
test esi, esi
je 0x18005b872
xor edi, edi
mov rbx, qword [0x1800af388]
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rbx + 8]
mov r8, qword [rbx]
cmp r8, r9
je 0x18005b857
lea rcx, [rbp - 0x48]
cmp byte [r8], 0x2d
jne 0x18005b84d
inc r8
call fcn.180005dc0
test rax, rax
je 0x18005b857
lea rsi, [0x1800aef40]
cmp r15, 0x10
jb 0x18005b70d
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18005b705
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005b93d
mov rcx, r14
call fcn.18006150c
inc r12d
add r13, 0x210
mov r14, qword [rsp + 0x58]
mov r8, qword [r14 + 0x4598]
mov rcx, qword [r14 + 0x45a0]
sub rcx, r8
movabs rax, 0xf83e0f83e0f83e1
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, r12d
cmp rax, rdx
jb 0x18005b550
lea r15, [0x1800aec80]
call fcn.18000d4f0
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [r15 + rax], 0
jne 0x18005b770
test rax, rax
je 0x18005b78e
mov rdx, r15
lea rcx, str.Selected_function:__s
call fcn.180035e10
mov qword [rsp + 0x40], 0
xor r8d, r8d
lea rdx, [rsp + 0x40]
lea rcx, str.Add_Hotkey
call fcn.180036be0
test al, al
je 0x18005ba36
cmp dword [0x18009c2b4], 2
jne 0x18005b944
mov byte [0x1800ad0c8], 1
lea rax, [0x1800ad0d0]
mov rcx, rsi
mov edx, 4
nop word [rax + rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x18005b7e0
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
mov r12, qword [rsp + 0x60]
mov r13d, 4
mov byte [r14 + 3], 1
jmp 0x18005ba41
call fcn.180005dc0
test rax, rax
jne 0x18005b872
inc edi
add rbx, 0x10
cmp edi, esi
jne 0x18005b6a0
cmp dword [0x1800af390], 0
jne 0x18005b6cf
cmp dword [0x1800acf90], r12d
sete dl
mov qword [rsp + 0x40], 0
lea r9, [rsp + 0x40]
xor r8d, r8d
lea rcx, [rbp - 0x48]
call fcn.180047ab0
lea rsi, [0x1800aef40]
test al, al
je 0x18005b92f
mov dword [0x1800acf90], r12d
mov rax, rsi
lea rcx, [rbp - 0x50]
mov edx, 4
nop dword [rax + rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x18005b8c0
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
lea r8, [rbp - 0x48]
lea rdx, [0x18008bd7c]
lea rcx, [0x1800aec80]
call fcn.18001f520
mov r15, qword [rbp - 0x78]
mov r14, qword [rsp + 0x70]
jmp 0x18005b6d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov byte [0x1800ad0c8], 0
mov rdx, r15
mov ecx, 0xffffffff
mov rax, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [rax + 1]
inc ecx
cmp byte [rax + r15], 0
jne 0x18005b960
mov ebx, 0x811c9dc5
test ecx, ecx
je 0x18005b994
nop word [rax + rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
imul ebx, ebx, 0x1000193
xor ebx, eax
sub ecx, 1
jne 0x18005b980
mov dword [r14 + 0x88], ebx
mov rdi, qword [r14 + 0x2a0]
mov r12, qword [rsp + 0x60]
mov r13d, 4
mov eax, dword [r12 + r13]
cmp dword [0x1800aeedc], eax
jle 0x18005b9e8
lea rcx, [0x1800aeedc]
call fcn.180061dc0
cmp dword [0x1800aeedc], 0xffffffff
jne 0x18005b9e8
mov rax, qword [0x18009cdd0]
mov qword [0x1800aeee0], rax
lea rcx, [0x1800aeedc]
call fcn.180061d60
mov rax, qword [0x1800aeee0]
test rax, rax
je 0x18005b9fb
mov edx, ebx
mov rcx, rdi
call rax
mov eax, dword [r14 + 0x88]
mov dword [0x1800ad360], eax
lea r8, [0x1800ad370]
lea rdx, [0x18008bd7c]
lea rcx, [0x1800ad2e0]
call fcn.18001f520
mov eax, dword [r14 + 0x80]
mov dword [0x1800ad0c0], eax
mov byte [r14 + 3], 1
jmp 0x18005ba41
mov r12, qword [rsp + 0x60]
mov r13d, 4
cmp byte [r14 + 3], 0
je 0x18005bb69
movaps xmm0, xmmword [0x180091b30]
movups xmmword [rsp + 0x40], xmm0
lea rdx, str.Press_a_key_
lea rcx, [rsp + 0x40]
call fcn.180035cb0
xor ebx, ebx
nop dword [rax + rax]
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetKeyState]
bt ax, 0xf
jb 0x18005ba8e
inc ebx
cmp ebx, 0xff
jl 0x18005ba70
jmp 0x18005bb69
lea eax, [rbx - 8]
cmp eax, 0xf5
ja 0x18005bb69
mov dword [0x1800ad0c4], ebx
cmp dword [0x18009c2b4], 2
sete byte [0x1800ad0c8]
lea rcx, [r14 + 0x45e8]
mov rdx, qword [r14 + 0x45f0]
lea r8, [0x1800ad0c0]
cmp rdx, qword [r14 + 0x45f8]
je 0x18005bb5f
mov eax, 5
nop word [rax + rax]
movups xmm0, xmmword [r8]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [r8 + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [r8 + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [r8 + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [r8 + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [r8 + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [r8 + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [r8 + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea r8, [r8 + 0x80]
sub rax, 1
jne 0x18005bae0
movups xmm0, xmmword [r8]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [r8 + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov rax, qword [r8 + 0x20]
mov qword [rdx + 0x20], rax
add qword [r14 + 0x45f0], 0x2a8
jmp 0x18005bb64
call fcn.18005d580
mov byte [r14 + 3], 0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180015ba0
mov qword [rsp + 0x40], 0
xor r8d, r8d
lea rdx, [rsp + 0x40]
lea rcx, [0x18008ec98]
call fcn.180036be0
test al, al
je 0x18005bcff
mov ecx, 0xffffffff
mov rax, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [rax + 1]
inc ecx
cmp byte [rax + r15], 0
jne 0x18005bbb0
mov ebx, 0x811c9dc5
test ecx, ecx
je 0x18005bbe5
nop word [rax + rax]
movzx eax, byte [r15]
lea r15, [r15 + 1]
imul ebx, ebx, 0x1000193
xor ebx, eax
sub ecx, 1
jne 0x18005bbd0
mov dword [r14 + 0x88], ebx
mov rdi, qword [r14 + 0x2a0]
mov eax, dword [r12 + r13]
cmp dword [0x1800aeedc], eax
jle 0x18005bc2e
lea rcx, [0x1800aeedc]
call fcn.180061dc0
cmp dword [0x1800aeedc], 0xffffffff
jne 0x18005bc2e
mov rax, qword [0x18009cdd0]
mov qword [0x1800aeee0], rax
lea rcx, [0x1800aeedc]
call fcn.180061d60
mov rax, qword [0x1800aeee0]
test rax, rax
je 0x18005bc41
mov edx, ebx
mov rcx, rdi
call rax
cmp dword [0x18009c2b4], 2
jne 0x18005bcc4
mov rax, qword [0x18009ce88]
add rax, 0x90
mov ecx, 4
nop dword [rax]
movups xmm0, xmmword [rsi]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rsi + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rsi + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rsi + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rsi + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rsi + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rsi, [rsi + 0x80]
sub rcx, 1
jne 0x18005bc60
movups xmm0, xmmword [rsi]
movups xmmword [rax], xmm0
mov dl, 1
mov rcx, r14
call fcn.18005c710
jmp 0x18005bcff
xor edx, edx
mov rcx, r14
call fcn.18005c710
jmp 0x18005bcff
mov qword [r14 + 0x2a0], 0
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], 0
jne 0x18005bce2
test rax, rax
je 0x18005bcff
mov rdx, rdi
lea rcx, str.Cannot_load__s_
call fcn.180035e10
mov rax, qword [0x18009ca28]
mov rcx, qword [rax + 0x3ed0]
cmp byte [rcx + 0xbb], 0
jne 0x18005bd2c
mov eax, dword [rcx + 0x1b4]
neg eax
sbb ecx, ecx
add ecx, 6
movaps xmm1, xmm8
call fcn.1800392d0
lea rcx, str.Registered_hotkeys:
call fcn.180035e10
xor esi, esi
mov r8, qword [r14 + 0x45e8]
mov rcx, qword [r14 + 0x45f0]
sub rcx, r8
movabs r15, 0x6060606060606061
mov rax, r15
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18005be4a
xor r9d, r9d
nop dword [rax]
nop word [rax + rax]
imul rax, r9, 0x2a8
add r8, rax
cmp byte [r8 + 8], 0
je 0x18005bde6
lea rdi, [r8 + 0x11c]
lea rdx, [r8 + 0x18]
test rdx, rdx
jne 0x18005bda5
xor ebx, ebx
jmp 0x18005bdf4
mov ecx, 0xffffffff
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
inc ecx
cmp byte [rax + rdx], 0
jne 0x18005bdb1
mov ebx, 0x811c9dc5
test ecx, ecx
je 0x18005bdf4
nop word [rax + rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
imul ebx, ebx, 0x1000193
xor ebx, eax
sub ecx, 1
jne 0x18005bdd0
jmp 0x18005bdf4
mov ebx, dword [r8 + 0x2a0]
lea rdi, [r8 + 0x220]
mov eax, 4
mov ecx, dword [rax + r8]
call fcn.18004fa80
mov rdx, rax
mov r9, rdi
mov r8d, ebx
lea rcx, str._s___Run__0x_X__from__s
call fcn.180035e10
inc esi
mov r8, qword [r14 + 0x45e8]
mov r9d, esi
mov rcx, qword [r14 + 0x45f0]
sub rcx, r8
mov rax, r15
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r9, rdx
jb 0x18005bd80
mov qword [rsp + 0x40], 0
xor r8d, r8d
lea rdx, [rsp + 0x40]
lea rcx, str.Clear_All
call fcn.180036be0
test al, al
je 0x18005be82
mov rax, qword [r14 + 0x45e8]
cmp rax, qword [r14 + 0x45f0]
je 0x18005be82
mov qword [r14 + 0x45f0], rax
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1800614b0
lea r11, [rsp + 0x2f0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm7, xmmword [r11 - 0x10]
movaps xmm8, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret