Function at 0x180001aa0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x180009010]
xor rax, rsp
mov qword [rbp + 7], rax
mov qword [rbp - 0x19], rcx
lea rax, [rcx + 0xa54bde0]
mov qword [rbp - 0x21], rax
lea r12, [rcx + 0xa5701b8]
mov ebx, dword [rcx + 0xa55ddec]
movd xmm6, ebx
cvtdq2pd xmm6, xmm6
movsd xmm1, qword [0x180006630]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm7, xmm0
movsd xmm1, qword [0x180006628]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
mulsd xmm7, qword [0x180006610]
mulsd xmm0, qword [0x180006618]
addsd xmm7, xmm0
movd xmm1, ebx
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [0x180006620]
cvtps2pd xmm2, xmm1
addsd xmm7, xmm2
addsd xmm7, qword [0x180006638]
cvttsd2si ebx, xmm7
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor r10d, r10d
test al, 1
je 0x180001c66
lea r9, [rbp + 4]
mov r8d, ebx
test ebx, ebx
jns 0x180001bc0
neg r8d
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x180001b80
dec r9
mov byte [r9], 0x2d
jmp 0x180001bea
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x180001bc0
mov qword [rbp - 0x61], r10
mov qword [rbp - 0x51], r10
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], r10b
lea rax, [rbp + 4]
cmp r9, rax
je 0x180001c1b
lea r8, [rbp + 4]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x61]
call fcn.180001670
nop
lea rcx, [rbp - 0x61]
call fcn.180001930
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x180001c63
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180001c5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180001c5e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800043e0
xor r10d, r10d
mov edi, r10d
mov r15, r10
movsxd r13, ebx
movabs rcx, 0x3fffffffffffffff
test ebx, ebx
jle 0x180001d69
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], r10
mov r14, qword [0x180009908]
mov rsi, qword [0x180009910]
cmp r14, rsi
je 0x180001d1f
sub rsi, r14
mov rbx, rsi
sar rbx, 2
cmp rbx, rcx
ja 0x180002ba9
lea rbx, [rbx*4]
cmp rbx, 0x1000
jb 0x180001cf0
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x180002ba9
call fcn.1800043e8
mov rcx, rax
test rax, rax
je 0x180002914
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180001d02
test rbx, rbx
je 0x180001cff
mov rcx, rbx
call fcn.1800043e8
jmp 0x180001d02
mov rax, r10
mov qword [rbp - 0x11], rax
add rbx, rax
mov qword [rbp - 1], rbx
mov r8, rsi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 9], rbx
lea rdx, [rbp - 0x11]
mov rcx, r12
call fcn.180001810
test rax, rax
je 0x180001d46
cmp dword [rax], 0
jle 0x180001d46
inc edi
cmp byte [0x1800098e1], 0
je 0x180001d46
mov dword [rax], 1
inc r15
add r12, 0x2110
cmp r15, r13
movabs rcx, 0x3fffffffffffffff
mov r10d, 0
jl 0x180001c81
mov ecx, 0x70
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180001d8a
cmp byte [0x1800098e7], 0
sete al
mov byte [0x1800098e7], al
jmp 0x180001d91
movzx eax, byte [0x1800098e7]
test al, al
je 0x180002002
cmp byte [0x1800098e0], 0
jne 0x180002002
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
xor r15d, r15d
mov qword [rbp - 1], r15
mov r14, qword [0x180009950]
mov rsi, qword [0x180009958]
cmp r14, rsi
je 0x180001e55
sub rsi, r14
mov rbx, rsi
sar rbx, 2
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x180002ba9
lea rbx, [rbx*4]
cmp rbx, 0x1000
jb 0x180001e26
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x180002ba9
call fcn.1800043e8
mov rcx, rax
test rax, rax
je 0x180002914
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180001e38
test rbx, rbx
je 0x180001e35
mov rcx, rbx
call fcn.1800043e8
jmp 0x180001e38
mov rax, r15
mov qword [rbp - 0x11], rax
add rbx, rax
mov qword [rbp - 1], rbx
mov r8, rsi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 9], rbx
lea rdx, [rbp - 0x11]
mov r13, qword [rbp - 0x21]
mov rcx, r13
call fcn.180001810
mov r12, rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], r15
mov r14, qword [0x180009980]
mov rsi, qword [0x180009988]
cmp r14, rsi
je 0x180001f14
sub rsi, r14
mov rbx, rsi
sar rbx, 2
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x180002ba9
lea rbx, [rbx*4]
cmp rbx, 0x1000
jb 0x180001ee5
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x180002ba9
call fcn.1800043e8
mov rcx, rax
test rax, rax
je 0x180002914
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180001ef7
test rbx, rbx
je 0x180001ef4
mov rcx, rbx
call fcn.1800043e8
jmp 0x180001ef7
mov rax, r15
mov qword [rbp - 0x11], rax
add rbx, rax
mov qword [rbp - 1], rbx
mov r8, rsi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 9], rbx
lea rdx, [rbp - 0x11]
mov rcx, r13
call fcn.180001810
mov r15, rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], 0
mov r14, qword [0x1800099b0]
mov rsi, qword [0x1800099b8]
cmp r14, rsi
je 0x180001fd2
sub rsi, r14
mov rbx, rsi
sar rbx, 2
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x180002ba9
lea rbx, [rbx*4]
cmp rbx, 0x1000
jb 0x180001fa4
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x180002ba9
call fcn.1800043e8
mov rcx, rax
test rax, rax
je 0x180002914
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180001fb5
test rbx, rbx
je 0x180001fb3
mov rcx, rbx
call fcn.1800043e8
jmp 0x180001fb5
xor eax, eax
mov qword [rbp - 0x11], rax
add rbx, rax
mov qword [rbp - 1], rbx
mov r8, rsi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 9], rbx
lea rdx, [rbp - 0x11]
mov rcx, r13
call fcn.180001810
test r12, r12
je 0x180001feb
mov dword [r12], 0x32
test r15, r15
je 0x180001ff7
mov dword [r15], 0x32
test rax, rax
je 0x180002002
mov dword [rax], 6
mov ecx, 0x71
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movabs rsi, 0x9090909090909090
movzx ecx, byte [0x1800098e0]
test al, 1
jne 0x18000202a
test cl, cl
je 0x1800020c8
cmp byte [0x1800098e6], 0
sete al
mov byte [0x1800098e6], al
test al, al
je 0x18000208b
test cl, cl
jne 0x18000208b
mov r13, qword [rbp - 0x19]
lea r9, [rbp - 0x19]
mov edx, 3
lea r8d, [rdx + 0x3d]
lea rcx, [r13 + 0x26e71ea]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov word [r13 + 0x26e71ea], si
mov byte [r13 + 0x26e71ec], sil
lea r9, [rbp - 0x19]
mov r8d, dword [rbp - 0x19]
mov edx, 3
lea rcx, [r13 + 0x26e71ea]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x1800020cc
mov r13, qword [rbp - 0x19]
lea r9, [rbp - 0x19]
mov edx, 3
lea r8d, [rdx + 0x3d]
lea rcx, [r13 + 0x26e71ea]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movzx eax, word [0x180006528]
mov word [r13 + 0x26e71ea], ax
movzx eax, byte [0x18000652a]
mov byte [r13 + 0x26e71ec], al
jmp 0x18000206f
mov r13, qword [rbp - 0x19]
mov ecx, 0x72
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800020ed
cmp byte [0x1800098e5], 0
sete al
mov byte [0x1800098e5], al
jmp 0x1800020f4
movzx eax, byte [0x1800098e5]
test al, al
je 0x1800021dd
cmp byte [0x1800098e0], 0
jne 0x1800021dd
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], 0
mov r14, qword [0x180009920]
mov rsi, qword [0x180009928]
cmp r14, rsi
je 0x1800021b8
sub rsi, r14
mov rbx, rsi
sar rbx, 2
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x180002ba9
lea rbx, [rbx*4]
cmp rbx, 0x1000
jb 0x18000218a
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x180002ba9
call fcn.1800043e8
mov rcx, rax
test rax, rax
je 0x180002914
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18000219b
test rbx, rbx
je 0x180002199
mov rcx, rbx
call fcn.1800043e8
jmp 0x18000219b
xor eax, eax
mov qword [rbp - 0x11], rax
add rbx, rax
mov qword [rbp - 1], rbx
mov r8, rsi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 9], rbx
lea rdx, [rbp - 0x11]
lea rcx, [r13 + 0xa54bde8]
call fcn.180001810
movabs rsi, 0x9090909090909090
test rax, rax
je 0x1800021dd
mov dword [rax], 0x12c
mov ecx, 0x73
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ecx, byte [0x1800098e0]
test al, 1
jne 0x1800021fb
test cl, cl
je 0x1800022a3
cmp byte [0x1800098e4], 0
sete al
mov byte [0x1800098e4], al
test al, al
je 0x180002245
test cl, cl
jne 0x180002245
lea r9, [rbp - 0x19]
mov edx, 7
lea r8d, [rdx + 0x39]
lea rcx, [r13 + 0x18b9ac4]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [r13 + 0x18b9ac4], esi
mov word [r13 + 0x18b9ac8], si
mov byte [r13 + 0x18b9aca], sil
jmp 0x180002289
lea r9, [rbp - 0x19]
mov edx, 7
lea r8d, [rdx + 0x39]
lea rcx, [r13 + 0x18b9ac4]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [0x180006530]
mov dword [r13 + 0x18b9ac4], eax
movzx eax, word [0x180006534]
mov word [r13 + 0x18b9ac8], ax
movzx eax, byte [0x180006536]
mov byte [r13 + 0x18b9aca], al
lea r9, [rbp - 0x19]
mov r8d, dword [rbp - 0x19]
mov edx, 7
lea rcx, [r13 + 0x18b9ac4]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180002380
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], 0
mov r14, qword [0x1800099e0]
mov rsi, qword [0x1800099e8]
cmp r14, rsi
je 0x180002365
sub rsi, r14
mov rbx, rsi
sar rbx, 2
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x180002ba9
lea rbx, [rbx*4]
cmp rbx, 0x1000
jb 0x180002337
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x180002ba9
call fcn.1800043e8
mov rcx, rax
test rax, rax
je 0x180002914
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180002348
test rbx, rbx
je 0x180002346
mov rcx, rbx
call fcn.1800043e8
jmp 0x180002348
xor eax, eax
mov qword [rbp - 0x11], rax
add rbx, rax
mov qword [rbp - 1], rbx
mov r8, rsi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 9], rbx
lea rdx, [rbp - 0x11]
lea rcx, [r13 + 0x179086d8]
call fcn.180001810
test rax, rax
je 0x180002380
add dword [rax], 0x1f4
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800025ff
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], 0
mov r14, qword [0x180009968]
mov rsi, qword [0x180009970]
cmp r14, rsi
je 0x180002442
sub rsi, r14
mov rbx, rsi
sar rbx, 2
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x180002ba9
lea rbx, [rbx*4]
cmp rbx, 0x1000
jb 0x180002414
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x180002ba9
call fcn.1800043e8
mov rcx, rax
test rax, rax
je 0x180002914
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180002425
test rbx, rbx
je 0x180002423
mov rcx, rbx
call fcn.1800043e8
jmp 0x180002425
xor eax, eax
mov qword [rbp - 0x11], rax
add rbx, rax
mov qword [rbp - 1], rbx
mov r8, rsi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 9], rbx
lea rdx, [rbp - 0x11]
lea rcx, [r13 + 0xa54bde0]
call fcn.180001810
mov r12, rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], 0
mov r14, qword [0x180009998]
mov rsi, qword [0x1800099a0]
cmp r14, rsi
je 0x180002504
sub rsi, r14
mov rbx, rsi
sar rbx, 2
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x180002ba9
lea rbx, [rbx*4]
cmp rbx, 0x1000
jb 0x1800024d6
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x180002ba9
call fcn.1800043e8
mov rcx, rax
test rax, rax
je 0x180002914
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800024e7
test rbx, rbx
je 0x1800024e5
mov rcx, rbx
call fcn.1800043e8
jmp 0x1800024e7
xor eax, eax
mov qword [rbp - 0x11], rax
add rbx, rax
mov qword [rbp - 1], rbx
mov r8, rsi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 9], rbx
lea rdx, [rbp - 0x11]
lea rcx, [r13 + 0xa54bde0]
call fcn.180001810
mov r15, rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], 0
mov r14, qword [0x1800099b0]
mov rsi, qword [0x1800099b8]
cmp r14, rsi
je 0x1800025c6
sub rsi, r14
mov rbx, rsi
sar rbx, 2
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x180002ba9
lea rbx, [rbx*4]
cmp rbx, 0x1000
jb 0x180002598
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x180002ba9
call fcn.1800043e8
mov rcx, rax
test rax, rax
je 0x180002914
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800025a9
test rbx, rbx
je 0x1800025a7
mov rcx, rbx
call fcn.1800043e8
jmp 0x1800025a9
xor eax, eax
mov qword [rbp - 0x11], rax
add rbx, rax
mov qword [rbp - 1], rbx
mov r8, rsi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 9], rbx
lea rdx, [rbp - 0x11]
lea r14, [r13 + 0xa54bde0]
mov rcx, r14
call fcn.180001810
test r12, r12
je 0x1800025e6
mov dword [r12], 0x320
test r15, r15
je 0x1800025f2
mov dword [r15], 0x320
test rax, rax
je 0x180002606
mov dword [rax], 6
jmp 0x180002606
lea r14, [r13 + 0xa54bde0]
mov ecx, 0x76
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18000283e
lea r9, [rbp + 4]
test edi, edi
jns 0x180002670
neg edi
nop dword [rax]
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul edi
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub dil, cl
add dil, 0x30
mov byte [r9], dil
mov edi, edx
test edx, edx
jne 0x180002630
dec r9
mov byte [r9], 0x2d
jmp 0x180002698
dec r9
mov eax, 0xcccccccd
mul edi
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub dil, cl
add dil, 0x30
mov byte [r9], dil
mov edi, edx
test edx, edx
jne 0x180002670
xor r15d, r15d
mov qword [rbp - 0x41], r15
mov r8d, r15d
mov qword [rbp - 0x31], r15
mov ecx, 0xf
mov qword [rbp - 0x29], rcx
mov byte [rbp - 0x41], r8b
lea rax, [rbp + 4]
cmp r9, rax
je 0x1800026d7
lea r8, [rbp + 4]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x41]
call fcn.180001670
mov rcx, qword [rbp - 0x29]
mov r8, qword [rbp - 0x31]
mov rax, rcx
sub rax, r8
mov esi, 0xc
cmp rax, rsi
jb 0x18000276b
lea rax, [r8 + 0xc]
mov qword [rbp - 0x31], rax
lea rbx, [rbp - 0x41]
cmp rcx, 0x10
cmovae rbx, qword [rbp - 0x41]
lea rax, [0x180006544]
lea r12, str.Ent_count_
cmp rax, rbx
jbe 0x18000272e
lea rax, [rbx + r8]
cmp r12, rax
ja 0x18000272e
cmp rbx, r12
ja 0x180002726
mov rdi, r15
jmp 0x180002731
mov rdi, rbx
sub rdi, r12
jmp 0x180002731
mov rdi, rsi
lea rcx, [rbx + 0xc]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
sub rsi, rdi
lea rdx, [r12 + 0xc]
add rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x41]
jmp 0x18000277c
mov qword [rsp + 0x28], rsi
mov rdx, rsi
lea rcx, [rbp - 0x41]
call fcn.180003f80
mov qword [rbp - 0x61], r15
mov qword [rbp - 0x51], r15
mov qword [rbp - 0x49], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp - 0x61]
call fcn.180001930
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x1800027ee
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800027e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800027e9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800043e0
mov qword [rbp - 0x51], r15
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
mov rdx, qword [rbp - 0x29]
cmp rdx, 0x10
jb 0x180002841
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002837
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180002837
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800043e0
jmp 0x180002841
xor r15d, r15d
mov ecx, 0x77
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18000285e
cmp byte [0x1800098e1], 0
sete byte [0x1800098e1]
mov ecx, 0x78
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18000287f
cmp byte [0x1800098e3], 0
sete al
mov byte [0x1800098e3], al
jmp 0x180002886
movzx eax, byte [0x1800098e3]
test al, al
je 0x18000295f
cmp byte [0x1800098e0], 0
jne 0x18000295f
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], r15
mov rsi, qword [0x180009938]
mov rdi, qword [0x180009940]
cmp rsi, rdi
je 0x18000294a
sub rdi, rsi
mov rbx, rdi
sar rbx, 2
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x180002ba9
lea rbx, [rbx*4]
cmp rbx, 0x1000
jb 0x18000291b
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x180002ba9
call fcn.1800043e8
mov rcx, rax
test rax, rax
je 0x180002914
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18000292d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rbx, rbx
je 0x18000292a
mov rcx, rbx
call fcn.1800043e8
jmp 0x18000292d
mov rax, r15
mov qword [rbp - 0x11], rax
add rbx, rax
mov qword [rbp - 1], rbx
mov r8, rdi
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 9], rbx
lea rdx, [rbp - 0x11]
mov rcx, r14
call fcn.180001810
test rax, rax
je 0x18000295f
mov word [rax], r15w
mov ecx, 0x79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ecx, byte [0x1800098e0]
test al, 1
jne 0x18000297d
test cl, cl
je 0x180002ad4
cmp byte [0x1800098e2], 0
sete al
mov byte [0x1800098e2], al
test al, al
je 0x180002a32
test cl, cl
jne 0x180002a32
lea r9, [rbp - 0x19]
mov edx, 3
lea r8d, [rdx + 0x3d]
lea rcx, [r13 + 0x26e50b8]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movabs rdi, 0x9090909090909090
mov word [r13 + 0x26e50b8], di
mov byte [r13 + 0x26e50ba], dil
lea r9, [rbp - 0x19]
mov r8d, dword [rbp - 0x19]
mov edx, 3
lea rcx, [r13 + 0x26e50b8]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea r9, [rbp - 0x19]
mov edx, 3
lea r8d, [rdx + 0x3d]
lea rcx, [r13 + 0x26e50d7]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov word [r13 + 0x26e50d7], di
mov byte [r13 + 0x26e50d9], dil
lea r9, [rbp - 0x19]
mov r8d, dword [rbp - 0x19]
mov edx, 3
lea rcx, [r13 + 0x26e50d7]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x180002ade
lea r9, [rbp - 0x19]
mov edx, 3
lea r8d, [rdx + 0x3d]
lea rcx, [r13 + 0x26e50b8]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movzx eax, word [0x180006548]
mov word [r13 + 0x26e50b8], ax
movzx eax, byte [0x18000654a]
mov byte [r13 + 0x26e50ba], al
lea r9, [rbp - 0x19]
mov r8d, dword [rbp - 0x19]
mov edx, 3
lea rcx, [r13 + 0x26e50b8]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea r9, [rbp - 0x19]
mov edx, 3
lea r8d, [rdx + 0x3d]
lea rcx, [r13 + 0x26e50d7]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movzx eax, word [0x18000654c]
mov word [r13 + 0x26e50d7], ax
movzx eax, byte [0x18000654e]
mov byte [r13 + 0x26e50d9], al
lea r9, [rbp - 0x19]
mov r8d, dword [rbp - 0x19]
mov edx, 3
lea rcx, [r13 + 0x26e50d7]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movabs rdi, 0x9090909090909090
mov ecx, 0x7a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ecx, byte [0x1800098e0]
test al, 1
jne 0x180002af8
test cl, cl
je 0x180002b72
cmp byte [0x1800098e8], 0
sete al
mov byte [0x1800098e8], al
test al, al
je 0x180002b33
test cl, cl
jne 0x180002b33
lea r9, [rbp - 0x19]
mov edx, 4
lea r8d, [rdx + 0x3c]
lea rcx, [r13 + 0x1e0ac88]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [r13 + 0x1e0ac88], edi
jmp 0x180002b58
lea r9, [rbp - 0x19]
mov edx, 4
lea r8d, [rdx + 0x3c]
lea rcx, [r13 + 0x1e0ac88]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [r13 + 0x1e0ac88], 0x24186c89
lea r9, [rbp - 0x19]
mov r8d, dword [rbp - 0x19]
mov edx, 4
lea rcx, [r13 + 0x1e0ac88]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1800043c0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180001650
int3