Function at 0x18009f930
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x12e0]
mov eax, 0x13e0
call fcn.1800cf8f0
sub rsp, rax
mov rax, qword [0x180106040]
xor rax, rsp
mov qword [rbp + 0x12d0], rax
mov r15, rcx
xor ebx, ebx
mov dword [rsp + 0x38], ebx
cmp byte [rcx + 0x48], bl
je 0x18009f5b4
cmp byte [0x1801d5220], bl
jne 0x18009f5b4
mov rdi, qword [0x1801d4b38]
mov rax, qword [0x1801d4b80]
mov rdx, qword [rax]
mov rax, qword [rdi]
mov r9, qword [rax + 0x2f8]
mov r8, qword [0x1801d4cd0]
mov rcx, rdi
call r9
mov rdx, qword [rdi]
mov r9, qword [rdx + 0xc0]
xor r8d, r8d
mov rdx, rax
mov rcx, rdi
call r9
test al, al
je 0x18009f5b4
mov rax, qword [0x1801d4b80]
lea rdx, [rsp + 0x20]
mov rcx, qword [rax + 8]
call fcn.1800abd10
nop
mov r8, qword [0x1801d4dc0]
mov rdx, qword [rax]
mov rcx, qword [0x1801d4b38]
call fcn.18004c910
mov rsi, rax
test rax, rax
je 0x18009f165
mov rcx, qword [0x1801d4b38]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xa8]
mov rdx, rax
call r8
mov rdi, rax
mov rcx, qword [0x1801d4b38]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xb8]
mov rdx, rsi
call r8
jmp 0x18009f168
mov rdi, rbx
mov esi, 8
mov rcx, qword [0x1801d4b38]
test rcx, rcx
je 0x18009f195
test rdi, rdi
je 0x18009f195
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
mov rdx, rdi
call r8
mov rcx, qword [0x1801d4b38]
test rcx, rcx
je 0x18009f1b8
mov rdx, qword [rsp + 0x20]
test rdx, rdx
je 0x18009f1b8
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
call r8
mov rcx, qword [0x1801d4b38]
test rdi, rdi
je 0x18009f5b4
mov rax, qword [r15 + 0x80]
cmp qword [rax + 8], 0
je 0x18009f2e6
mov rax, qword [0x1801d4b80]
lea rdx, [rsp + 0x30]
mov rcx, qword [rax + 8]
call fcn.1800abd10
nop
mov dword [rsp + 0x38], 9
mov r8, qword [0x1801d4dc0]
mov rdx, qword [rax]
mov rcx, qword [0x1801d4b38]
call fcn.18004c910
mov rsi, rax
test rax, rax
je 0x18009f249
mov rcx, qword [0x1801d4b38]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xa8]
mov rdx, rax
call r8
mov rdi, rax
mov qword [rsp + 0x28], rax
mov rcx, qword [0x1801d4b38]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0xb8]
mov rdx, rsi
call rax
mov rdx, rdi
jmp 0x18009f254
mov rdi, rbx
mov qword [rsp + 0x28], rbx
mov rdx, rbx
mov dword [rsp + 0x38], 0x1b
mov r8, qword [0x1801d4dd0]
mov rcx, qword [0x1801d4b38]
call fcn.18004c910
mov rsi, rax
test rax, rax
je 0x18009f2ae
mov rcx, qword [0x1801d4b38]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xa8]
mov rdx, rax
call r8
mov rbx, rax
mov qword [rsp + 0x20], rax
mov rcx, qword [0x1801d4b38]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0xb8]
mov rdx, rsi
call rax
jmp 0x18009f2b3
mov qword [rsp + 0x20], rbx
mov rdx, rbx
mov esi, 0x3f
mov dword [rsp + 0x38], esi
mov rcx, qword [0x1801d4b38]
mov rax, qword [rcx]
mov r9, qword [rax + 0x100]
xor r8d, r8d
call r9
mov rcx, qword [0x1801d4b38]
test al, al
jne 0x18009f2f0
mov r14b, 1
jmp 0x18009f2f3
mov rdi, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
xor r14b, r14b
test sil, 4
je 0x18009f321
and esi, 0xfffffffb
mov dword [rsp + 0x38], esi
test rcx, rcx
je 0x18009f321
test rbx, rbx
je 0x18009f321
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
mov rdx, rbx
call r8
mov rcx, qword [0x1801d4b38]
test sil, 2
je 0x18009f34f
and esi, 0xfffffffd
mov dword [rsp + 0x38], esi
test rcx, rcx
je 0x18009f34f
test rdi, rdi
je 0x18009f34f
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
mov rdx, rdi
call r8
mov rcx, qword [0x1801d4b38]
test sil, 1
je 0x18009f372
test rcx, rcx
je 0x18009f372
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x18009f372
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
call r8
nop
test r14b, r14b
jne 0x18009f5b4
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0x346dc5d63886594b
imul rcx
mov rbx, rdx
sar rbx, 0xb
mov rax, rbx
shr rax, 0x3f
add rbx, rax
mov eax, dword [0x1801d4894]
test eax, eax
jne 0x18009f3b4
mov eax, ebx
mov dword [0x1801d4894], ebx
mov ecx, ebx
sub ecx, eax
mov eax, 0x3e8
cdq
idiv dword [0x180110c54]
cmp ecx, eax
jl 0x18009f5b4
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18009f5b4
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_GetCursorPos]
movzx r9d, word [rsp + 0x3c]
shl r9d, 0x10
movzx eax, word [rsp + 0x38]
or r9, rax
mov edx, 0x204
mov r8d, 2
mov rcx, qword [0x1801d5228]
call qword [sym.imp.USER32.dll_PostMessageA]
movzx r9d, word [rsp + 0x3c]
shl r9d, 0x10
movzx eax, word [rsp + 0x38]
or r9, rax
mov edx, 0x205
mov r8d, 2
mov rcx, qword [0x1801d5228]
call qword [sym.imp.USER32.dll_PostMessageA]
mov dword [0x1801d4894], ebx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x12c4], 0xffffffff
mov dword [rsp + 0x44], eax
mov edx, 1
mov r9d, 0x270
nop dword [rax]
nop dword [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0x44], eax
inc rdx
cmp rdx, r9
jb 0x18009f470
mov dword [rsp + 0x40], r9d
mov rax, qword [r15 + 0x78]
cvttss2si ecx, dword [rax + 8]
mov rax, qword [r15 + 0x70]
cvttss2si edx, dword [rax + 8]
lea eax, [rcx - 0x80000000]
mov r14d, 0x80000000
lea esi, [rcx + r14]
cmp ecx, r14d
cmovae esi, eax
lea eax, [rdx - 0x80000000]
lea ebx, [rdx + r14]
cmp edx, r14d
cmovae ebx, eax
sub ebx, esi
cmp ebx, 0xffffffff
jne 0x18009f552
lea r8, [rsp + 0x48]
nop dword [rax + rax]
mov edx, dword [r8 - 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, dword [r8 - 4]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
shr edx, 1
xor ecx, edx
xor ecx, dword [r8 + 0x630]
mov dword [r8 + 0x9bc], ecx
lea r8, [r8 + 4]
sub r9, 1
jne 0x18009f4e0
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + rax*4 + 0x44]
mov eax, ecx
shr eax, 0xb
and eax, dword [rbp + 0x12c4]
xor ecx, eax
mov eax, ecx
and eax, 0xff3a58ad
shl eax, 7
xor ecx, eax
mov eax, ecx
and eax, 0xffffdf8c
shl eax, 0xf
xor ecx, eax
mov r8d, ecx
shr r8d, 0x12
xor r8d, ecx
jmp 0x18009f59a
inc ebx
lea rcx, [rsp + 0x40]
call fcn.1800788d0
mov edi, ebx
mov r8d, eax
imul r8, rdi
cmp r8d, ebx
jae 0x18009f596
mov eax, ebx
neg eax
xor edx, edx
div ebx
mov ebx, edx
cmp r8d, edx
jae 0x18009f596
nop dword [rax + rax]
lea rcx, [rsp + 0x40]
call fcn.1800788d0
mov r8d, eax
imul r8, rdi
cmp r8d, ebx
jb 0x18009f580
shr r8, 0x20
lea edx, [rsi + r8]
lea eax, [rdx + r14]
lea ecx, [rdx - 0x80000000]
cmp edx, r14d
cmovae ecx, eax
mov dword [0x180110c54], ecx
mov rcx, qword [rbp + 0x12d0]
xor rcx, rsp
call fcn.1800caa50
lea r11, [rsp + 0x13e0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov rcx, qword [rcx + 8]
jmp 0x18009f060