Function at 0x180139bd0
Capabilities:
Get keyboard layout
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov dword [rax + 0x10], edx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xf8]
sub rsp, 0x1c0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm12
movaps xmm12, xmm2
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
xor esi, esi
mov r13d, esi
mov qword [rsp + 0x70], rsi
mov qword [rbp - 0x78], rsi
movdqu xmmword [rbp - 0x70], xmm0
mov r12d, esi
mov qword [rsp + 0x38], rsi
mov qword [rbp - 0x60], rsi
movdqu xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rsi
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
lea rcx, [rbp - 0x50]
call fcn.18009f820
lea rcx, [rbp + 0x10]
call fcn.18009f450
lea rcx, [rbp + 0x118]
call fcn.1800098f0
mov rcx, rax
movabs r14, 0x431bde82d7b634db
mov rax, r14
imul qword [rcx]
mov rdi, rdx
sar rdi, 0x12
mov rax, rdi
shr rax, 0x3f
add rdi, rax
mov qword [rsp + 0x50], rdi
lea r8d, [rsi - 1]
mov dl, 1
lea rcx, [rbp - 8]
call fcn.180136ef0
nop
lea rdx, str.Check_took_time1:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.18000b990
mov rbx, rax
lea rcx, [rbp + 0x118]
call fcn.1800098f0
mov rcx, rax
mov rax, r14
imul qword [rcx]
sar rdx, 0x12
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
sub rdx, rdi
xorps xmm1, xmm1
js 0x180139cf8
cvtsi2ss xmm1, rdx
jmp 0x180139d0d
mov rax, rdx
shr rax, 1
and edx, 1
or rax, rdx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
mulss xmm1, dword [0x18031f58c]
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
mov rcx, rax
lea rdx, str._Seconds.__n
call fcn.18000b990
mov r10, qword [rbp + 0x100]
cmp byte [0x18036b1e2], 0
je 0x180139dd5
mov rcx, qword [r10]
mov rax, qword [r10 + 8]
cmp rcx, rax
je 0x180139dd5
mov ebx, esi
sub rax, rcx
sar rax, 2
test rax, rax
je 0x180139dd5
mov rdi, rsi
lea rdx, str.AObj_id:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.18000b990
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x1802f9cb8]
call fcn.18000b990
mov rcx, qword [rbp + 0x100]
mov rcx, qword [rcx]
mov edx, dword [rdi + rcx]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x18000bb70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
inc ebx
lea rdi, [rdi + 4]
mov r10, qword [rbp + 0x100]
mov rcx, qword [r10 + 8]
sub rcx, qword [r10]
sar rcx, 2
movsxd rax, ebx
cmp rax, rcx
jb 0x180139d62
mov rcx, qword [r10]
mov rax, qword [r10 + 8]
cmp rcx, rax
je 0x18013a9bb
mov r9d, esi
mov dword [rsp + 0x40], esi
sub rax, rcx
sar rax, 2
movabs r15, 0xd37a6f4de9bd37a7
mov rdi, qword [rbp - 0x80]
mov rbx, qword [rbp - 0x68]
test rax, rax
je 0x18013a01f
mov r8, rsi
mov qword [rsp + 0x30], rsi
movss xmm7, dword [rbp - 0x4c]
movss xmm8, dword [rbp - 0x50]
movss xmm9, dword [0x18031f5c4]
movss xmm10, dword [0x18031f858]
mov rdx, qword [rbp - 8]
nop word [rax + rax]
mov r14d, esi
mov rax, qword [rbp]
sub rax, rdx
sar rax, 3
imul rax, r15
test rax, rax
je 0x180139fed
mov r15, rsi
movabs rcx, 0xd37a6f4de9bd37a7
nop dword [rax + rax]
mov eax, dword [rdx + rsi + 0x78]
cmp eax, 0xc
je 0x180139e81
test eax, eax
jne 0x180139fad
mov ecx, dword [rdx + rsi + 0x1c]
test ecx, ecx
jle 0x180139fa3
mov rax, qword [r10]
mov r8d, dword [r8 + rax]
test r8d, r8d
je 0x180139f9e
cmp ecx, r8d
jne 0x180139f9e
movss xmm1, dword [rdx + rsi + 0x14]
subss xmm1, xmm7
mulss xmm1, xmm1
movss xmm0, dword [rdx + rsi + 0x10]
subss xmm0, xmm8
mulss xmm0, xmm0
addss xmm0, xmm1
xorps xmm6, xmm6
sqrtss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, r14d
mulss xmm0, xmm9
addss xmm6, xmm0
movss dword [rbp + 0x118], xmm6
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [rbp + 0x108]
mulss xmm0, xmm10
comiss xmm6, xmm0
jae 0x180139f9e
cmp rdi, r13
je 0x180139f13
movss dword [rdi], xmm6
add rdi, 4
mov qword [rbp - 0x80], rdi
jmp 0x180139f2f
lea r8, [rbp + 0x118]
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.18000c750
mov r13, qword [rbp - 0x78]
mov rdi, qword [rbp - 0x80]
cmp rbx, r12
je 0x180139f42
movss dword [rbx], xmm6
add rbx, 4
mov qword [rbp - 0x68], rbx
jmp 0x180139f5d
lea r8, [rbp + 0x118]
mov rdx, rbx
lea rcx, [rbp - 0x70]
call fcn.18000c750
mov r12, qword [rbp - 0x60]
mov rbx, qword [rbp - 0x68]
imul r8, r15, 0xb8
add r8, qword [rbp - 8]
mov rax, qword [rbp - 0x38]
cmp rax, qword [rbp - 0x30]
je 0x180139f87
mov rdx, r8
mov rcx, rax
call fcn.18004f800
add qword [rbp - 0x38], 0xb8
jmp 0x180139f93
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.18005e2c0
mov r10, qword [rbp + 0x100]
mov rdx, qword [rbp - 8]
mov r8, qword [rsp + 0x30]
movabs rcx, 0xd37a6f4de9bd37a7
inc r14d
add rsi, 0xb8
movsxd r15, r14d
mov rax, qword [rbp]
sub rax, rdx
sar rax, 3
imul rax, rcx
cmp r15, rax
jb 0x180139e70
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x38], r12
mov r9d, dword [rsp + 0x40]
xor esi, esi
movabs r15, 0xd37a6f4de9bd37a7
inc r9d
mov dword [rsp + 0x40], r9d
add r8, 4
mov qword [rsp + 0x30], r8
mov rcx, qword [r10 + 8]
sub rcx, qword [r10]
sar rcx, 2
movsxd rax, r9d
cmp rax, rcx
jb 0x180139e40
movabs r14, 0x431bde82d7b634db
lea rdx, [0x180136820]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
lea rdx, str.Check_took_time2:
call fcn.18000b990
mov rsi, rax
lea rcx, [rbp + 0x118]
call fcn.1800098f0
mov rcx, rax
mov rax, r14
imul qword [rcx]
sar rdx, 0x12
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
sub rdx, qword [rsp + 0x50]
xorps xmm1, xmm1
js 0x18013a079
cvtsi2ss xmm1, rdx
jmp 0x18013a08e
mov rax, rdx
shr rax, 1
and edx, 1
or rax, rdx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
mulss xmm1, dword [0x18031f58c]
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
mov rcx, rax
lea rdx, str._Seconds.__n
call fcn.18000b990
mov r15, qword [rbp - 0x70]
mov rsi, qword [rsp + 0x78]
mov rax, qword [rbp - 0x38]
cmp qword [rbp - 0x40], rax
je 0x18013a1a0
mov r14, rdi
sub r14, rsi
sar r14, 2
mov qword [rsp + 0x48], r14
xor r9d, r9d
mov r8, r14
mov rdx, rdi
mov rcx, rsi
call fcn.1801443f0
mov dword [rbp + 0x118], 0
test r14, r14
je 0x18013a1a0
sub rbx, r15
sar rbx, 2
mov r14, rsi
mov rcx, qword [rsp + 0x60]
mov r12d, dword [rbp + 0x118]
mov rdx, qword [rsp + 0x48]
xor r13d, r13d
mov esi, r13d
test rbx, rbx
je 0x18013a180
mov rax, r13
mov rdi, r15
movss xmm0, dword [rdi]
ucomiss xmm0, dword [r14]
jne 0x18013a16d
imul r8, rax, 0xb8
add r8, qword [rbp - 0x40]
cmp rcx, qword [rsp + 0x68]
je 0x18013a15b
mov rdx, r8
call fcn.18004f800
mov rcx, qword [rsp + 0x60]
add rcx, 0xb8
mov qword [rsp + 0x60], rcx
jmp 0x18013a16d
mov rdx, rcx
lea rcx, [rsp + 0x58]
call fcn.18005e2c0
mov rcx, qword [rsp + 0x60]
inc esi
add rdi, 4
movsxd rax, esi
cmp rax, rbx
jb 0x18013a124
mov rdx, qword [rsp + 0x48]
inc r12d
add r14, 4
movsxd rax, r12d
cmp rax, rdx
jb 0x18013a116
mov r12, qword [rsp + 0x38]
mov r13, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
jmp 0x18013a1a5
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
cmp rdx, rcx
je 0x18013a9c4
xor edi, edi
mov ebx, edi
mov dword [rsp + 0x70], ebx
sub rcx, rdx
sar rcx, 3
movabs rax, 0xd37a6f4de9bd37a7
imul rcx, rax
test rcx, rcx
je 0x18013a8ee
xor r15d, r15d
mov esi, r15d
mov qword [rsp + 0x48], r15
lea r12, [0x18036b440]
movss xmm8, dword [0x18031f590]
movss xmm7, dword [rdx + rsi + 0x10]
mulss xmm7, xmm8
movss xmm6, dword [rdx + rsi + 0x14]
mulss xmm6, xmm8
lea rdx, [0x1800473d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
lea rdx, str.ItemX:
call fcn.18000b990
movaps xmm1, xmm7
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
mov rcx, rax
lea rdx, str._ItemY:
call fcn.18000b990
movaps xmm1, xmm6
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___float____ptr64]
lea rdx, [0x18000bb70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movsd xmm0, qword [rbp + 0x10]
movsd qword [rbp + 0x20], xmm0
mov eax, dword [rbp + 0x18]
mov dword [rbp + 0x28], eax
movss dword [rbp - 0x50], xmm7
movss dword [rbp - 0x4c], xmm6
mov dword [rbp - 0x48], 0
movaps xmm2, xmm12
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x50]
call fcn.1800e2c00
mov dword [rsp + 0x40], r15d
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
add ecx, ecx
sub r8d, ecx
add r8d, 2
test r8d, r8d
jle 0x18013a89e
nop dword [rax + rax]
movsxd rdx, dword [0x18035f1f8]
mov rax, qword [rsp + 0x58]
add rdx, qword [rax + rsi]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rsp + 0x50]
mov rcx, qword [0x18036b180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x18013a31b
mov rax, qword gs:[0x30]
cmp dword [rax + 0x1250], 0
mov rbx, r15
jne 0x18013a320
mov rbx, qword [rsp + 0x50]
mov ecx, 0x64
call fcn.1800da920
cmp eax, 0x60
mov ecx, 0x12c
jg 0x18013a339
mov ecx, 0x32
call fcn.1800da920
lea ecx, [rax + 0x5a]
call qword [sym.imp.KERNEL32.dll_Sleep]
movsxd rdx, dword [0x18035f1e8]
add rdx, rbx
mov dword [rbp + 0x118], r15d
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x118]
mov rcx, qword [0x18036b180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x18013a390
mov rax, qword gs:[0x30]
cmp dword [rax + 0x1250], 0
mov eax, r15d
jne 0x18013a396
mov eax, dword [rbp + 0x118]
mov rdx, qword [rsp + 0x58]
cmp dword [rdx + rsi + 0x84], eax
je 0x18013a84c
mov rdx, qword [rdx + rsi + 8]
lea rcx, [rbp + 0x30]
call fcn.1800e48a0
mov eax, dword [0x18036b14c]
mov dword [rbp + 0x118], eax
mov eax, dword [0x18036b148]
cdq
sub eax, edx
sar eax, 1
mov r13d, eax
mov edx, dword [rbp + 0x30]
sub edx, eax
mov ecx, edx
neg ecx
cmovs ecx, edx
cmp ecx, 0x64
jle 0x18013a5ce
mov rdx, qword [rsp + 0x58]
mov rdx, qword [rdx + rsi + 8]
lea rcx, [rbp - 0x28]
call fcn.1800e48a0
mov eax, dword [rbp - 0x28]
sub eax, r13d
mov edi, eax
neg edi
cmovs edi, eax
cmp dword [0x18036b1dc], 0
je 0x18013a5ce
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov rsi, rax
call fcn.1800656c0
mov r14, rax
mov word [rsp + 0x3a], r15w
mov dword [rsp + 0x3c], r15d
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x50]
call fcn.1800dbdc0
mov ecx, eax
lea r12, [rcx + rcx]
shr r12, 0x20
inc r12d
mov rdx, rsi
cmp r12d, 1
mov cl, 0x64
je 0x18013a459
mov cl, 0x61
call qword [sym.imp.USER32.dll_VkKeyScanExA]
mov r8, rsi
mov edx, 4
movsx ecx, ax
call qword [sym.imp.USER32.dll_MapVirtualKeyExW]
mov word [rsp + 0x38], ax
lea r8, [rsp + 0x38]
mov edx, dword [0x18036b1dc]
mov rcx, r14
call fcn.180065bf0
cmp edi, 0x64
jle 0x18013a559
cmp r15d, 0x32
jge 0x18013a559
cmp byte [0x18036b05a], 0
jne 0x18013a559
inc r15d
mov ebx, edi
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x48]
mov rdx, qword [rdx + rax + 8]
lea rcx, [rbp + 0x40]
call fcn.1800e48a0
movsd xmm0, qword [rax]
movsd qword [rbp - 0x28], xmm0
mov eax, dword [rax + 8]
mov dword [rbp - 0x20], eax
mov eax, dword [rbp - 0x28]
sub eax, r13d
mov edi, eax
neg edi
cmovs edi, eax
cmp edi, ebx
jle 0x18013a550
mov eax, 1
mov word [rsp + 0x3a], ax
lea r8, [rsp + 0x38]
mov edx, dword [0x18036b1dc]
mov rcx, r14
call fcn.180065bf0
mov rdx, rsi
cmp r12d, 1
mov cl, 0x61
je 0x18013a51a
mov cl, 0x64
call qword [sym.imp.USER32.dll_VkKeyScanExA]
mov r8, rsi
mov edx, 4
movsx ecx, ax
call qword [sym.imp.USER32.dll_MapVirtualKeyExW]
mov word [rsp + 0x38], ax
xor eax, eax
mov word [rsp + 0x3a], ax
lea r8, [rsp + 0x38]
mov edx, dword [0x18036b1dc]
mov rcx, r14
call fcn.180065bf0
cmp edi, 0x64
jg 0x18013a491
mov eax, 1
mov word [rsp + 0x3a], ax
lea r8, [rsp + 0x38]
mov edx, dword [0x18036b1dc]
mov rcx, r14
call fcn.180065bf0
test r14, r14
je 0x18013a5bf
mov rbx, r14
mov edi, 0x14
mov rcx, qword [rbx]
cmp rcx, 0xffffffffffffffff
je 0x18013a592
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x18013a5a1
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 0x10
sub rdi, 1
jne 0x18013a583
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea r12, [0x18036b440]
xor r15d, r15d
mov rsi, qword [rsp + 0x48]
lea rdx, [0x1800473d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
lea rdx, str.screenp.y:
call fcn.18000b990
mov ebx, dword [rbp + 0x34]
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, str.p.y_2:
call fcn.18000b990
mov rcx, rax
mov eax, dword [rbp + 0x118]
cdq
sub eax, edx
sar eax, 1
mov r13d, eax
mov edx, eax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x18000bb70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
sub ebx, r13d
lea ecx, [rbx + 0x78]
mov edx, ecx
neg edx
cmovs edx, ecx
cmp edx, 0x14
jle 0x18013a84c
mov rdx, qword [rsp + 0x58]
mov rdx, qword [rdx + rsi + 8]
lea rcx, [rbp - 0x18]
call fcn.1800e48a0
lea eax, [rbx + 0x50]
mov ebx, eax
neg ebx
cmovs ebx, eax
cmp dword [0x18036b1dc], 0
je 0x18013a84c
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov rdi, rax
call fcn.1800656c0
mov r14, rax
mov word [rsp + 0x32], r15w
mov dword [rsp + 0x34], r15d
mov qword [rbp + 0x118], r12
lea rcx, [rbp + 0x118]
call fcn.1800dbdc0
mov ecx, eax
lea r12, [rcx + rcx]
shr r12, 0x20
inc r12d
mov rdx, rdi
cmp r12d, 1
mov cl, 0x77
je 0x18013a6c2
mov cl, 0x73
call qword [sym.imp.USER32.dll_VkKeyScanExA]
mov r8, rdi
mov edx, 4
movsx ecx, ax
call qword [sym.imp.USER32.dll_MapVirtualKeyExW]
mov word [rsp + 0x30], ax
lea r8, [rsp + 0x30]
mov edx, dword [0x18036b1dc]
mov rcx, r14
call fcn.180065bf0
cmp ebx, 0x14
jle 0x18013a7de
nop word [rax + rax]
cmp r15d, 0x32
jge 0x18013a7de
cmp byte [0x18036b05a], 0
jne 0x18013a7de
inc r15d
mov eax, dword [rbp - 0x14]
sub eax, r13d
add eax, 0x78
mov ebx, eax
neg ebx
cmovs ebx, eax
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, qword [rsp + 0x58]
mov rdx, qword [rdx + rsi + 8]
lea rcx, [rbp + 0x4c]
call fcn.1800e48a0
movsd xmm0, qword [rax]
movsd qword [rbp - 0x18], xmm0
mov eax, dword [rax + 8]
mov dword [rbp - 0x10], eax
mov rax, qword [rbp - 0x18]
shr rax, 0x20
sub eax, r13d
add eax, 0x78
mov esi, eax
neg esi
cmovs esi, eax
cmp esi, ebx
jle 0x18013a7d0
mov eax, 1
mov word [rsp + 0x32], ax
lea r8, [rsp + 0x30]
mov edx, dword [0x18036b1dc]
mov rcx, r14
call fcn.180065bf0
mov rdx, rdi
cmp r12d, 1
mov cl, 0x73
je 0x18013a79a
mov cl, 0x77
call qword [sym.imp.USER32.dll_VkKeyScanExA]
mov r8, rdi
mov edx, 4
movsx ecx, ax
call qword [sym.imp.USER32.dll_MapVirtualKeyExW]
mov word [rsp + 0x30], ax
xor eax, eax
mov word [rsp + 0x32], ax
lea r8, [rsp + 0x30]
mov edx, dword [0x18036b1dc]
mov rcx, r14
call fcn.180065bf0
cmp esi, 0x14
mov rsi, qword [rsp + 0x48]
jg 0x18013a700
mov eax, 1
mov word [rsp + 0x32], ax
lea r8, [rsp + 0x30]
mov edx, dword [0x18036b1dc]
mov rcx, r14
call fcn.180065bf0
test r14, r14
je 0x18013a84c
mov rbx, r14
mov edi, 0x14
nop dword [rax + rax]
mov rcx, qword [rbx]
cmp rcx, 0xffffffffffffffff
je 0x18013a81f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x18013a82e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 0x10
sub rdi, 1
jne 0x18013a810
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ebx, dword [rsp + 0x40]
inc ebx
mov dword [rsp + 0x40], ebx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
add ecx, ecx
sub r8d, ecx
add r8d, 2
cmp ebx, r8d
mov r15d, 0
lea r12, [0x18036b440]
jl 0x18013a2d0
mov ebx, dword [rsp + 0x70]
lea r12, [0x18036b440]
inc ebx
mov dword [rsp + 0x70], ebx
add rsi, 0xb8
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
sub rcx, rdx
sar rcx, 3
movabs rax, 0xd37a6f4de9bd37a7
imul rcx, rax
movsxd rax, ebx
cmp rax, rcx
jb 0x18013a1f4
mov r13, qword [rbp - 0x78]
mov rsi, qword [rsp + 0x78]
mov r12, qword [rbp - 0x60]
mov r15, qword [rbp - 0x70]
xor edi, edi
lea rcx, [rbp - 8]
call fcn.18005b090
nop
lea rcx, [rsp + 0x58]
call fcn.18005b090
nop
lea rcx, [rbp - 0x40]
call fcn.18005b090
nop
test r15, r15
je 0x18013a95a
sub r12, r15
sar r12, 2
lea rdx, [r12*4]
mov rax, r15
cmp rdx, 0x1000
jb 0x18013a946
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18013aa18
mov rcx, r15
call fcn.1802990b4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
test rsi, rsi
je 0x18013a9a8
sub r13, rsi
sar r13, 2
lea rdx, [r13*4]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18013a993
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18013aa6e
mov rcx, rsi
call fcn.1802990b4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rdi
mov rcx, qword [rbp + 0x100]
call fcn.18000b810
mov al, 1
jmp 0x18013aa98
mov rsi, qword [rsp + 0x78]
mov r15, qword [rbp - 0x70]
lea rcx, [rbp - 8]
call fcn.18005b090
nop
lea rcx, [rsp + 0x58]
call fcn.18005b090
nop
lea rcx, [rbp - 0x40]
call fcn.18005b090
nop
test r15, r15
je 0x18013aa37
sub r12, r15
sar r12, 2
lea rdx, [r12*4]
mov rax, r15
cmp rdx, 0x1000
jb 0x18013aa1f
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013aa1f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.1802990b4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
xor ebx, ebx
mov qword [rbp - 0x60], rbx
jmp 0x18013aa39
xor ebx, ebx
test rsi, rsi
je 0x18013aa8a
sub r13, rsi
sar r13, 2
lea rdx, [r13*4]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18013aa75
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18013aa75
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1802990b4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rbx
mov rcx, qword [rbp + 0x100]
call fcn.18000b810
xor al, al
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm12, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret