Function at 0x180010e20
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x1380]
mov eax, 0x1480
call fcn.18004fa20
sub rsp, rax
mov rax, qword [0x180064040]
xor rax, rsp
mov qword [rbp + 0x1370], rax
xor ebx, ebx
mov dword [rbp - 0x30], ebx
cmp byte [0x180065250], bl
je 0x180008898
cmp byte [0x180064f80], bl
jne 0x180008898
call fcn.18004c8b0
test al, al
jne 0x180008898
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov r8d, 0x1c
lea rdx, str.net.minecraft.item.ItemBlock
lea rcx, [rsp + 0x20]
call fcn.1800018a0
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x20]
call fcn.18004d0c0
mov rax, qword [0x180064f88]
lea rdx, [rsp + 0x60]
mov rcx, qword [rax + 0x38]
call fcn.18000ffd0
nop
mov rbx, qword [0x180065028]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx]
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x180064fa0]
call fcn.180006710
mov rbx, rax
lea rcx, [rsp + 0x20]
call fcn.180008320
nop
lea rsi, vtable.CItemStack.0
mov qword [rsp + 0x20], rsi
cmp byte [0x180065010], 0
jne 0x1800084d7
call fcn.180007bb0
mov rcx, qword [0x180065038]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x48], rbx
mov edi, 4
lea rcx, [rsp + 0x20]
call fcn.1800083d0
mov rbx, rax
mov r8, qword [rsp + 0x38]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.180002240
mov edx, 0x48
mov rcx, qword [rsp + 0x38]
call fcn.18004ec28
mov r8, qword [rsp + 0x28]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x28]
call fcn.180002240
mov edx, 0x48
mov rcx, qword [rsp + 0x28]
call fcn.18004ec28
nop
mov r8, qword [rsp + 0x78]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x78]
call fcn.180002240
mov edx, 0x48
mov rcx, qword [rsp + 0x78]
call fcn.18004ec28
mov r8, qword [rsp + 0x68]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x68]
call fcn.180002240
mov edx, 0x48
mov rcx, qword [rsp + 0x68]
call fcn.18004ec28
test rbx, rbx
je 0x180008898
cmp byte [0x1800640b4], 0
je 0x180008675
mov rax, qword [0x180064f88]
lea rdx, [rbp - 0x68]
mov rcx, qword [rax + 0x38]
call fcn.18000ffd0
nop
mov dword [rbp - 0x30], 5
mov rbx, qword [0x180065028]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx]
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x180064fa0]
call fcn.180006710
mov rbx, rax
lea rcx, [rsp + 0x20]
call fcn.180008320
nop
mov qword [rsp + 0x20], rsi
cmp byte [0x180065010], 0
jne 0x180008610
call fcn.180007bb0
mov rcx, qword [0x180065038]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x48], rbx
mov edi, 0xf
mov dword [rbp - 0x30], edi
mov rbx, qword [0x180065030]
lea rcx, [rsp + 0x20]
call fcn.1800083d0
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x180064fa0]
call fcn.180006710
mov rcx, qword [0x180064fa0]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x100]
mov r8, qword [rsp + 0x58]
mov rdx, rax
call r9
test al, al
jne 0x180008675
mov bl, 1
jmp 0x180008677
xor bl, bl
test dil, 2
je 0x1800086cf
and edi, 0xfffffffd
mov r8, qword [rsp + 0x38]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.180002240
mov edx, 0x48
mov rcx, qword [rsp + 0x38]
call fcn.18004ec28
mov r8, qword [rsp + 0x28]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x28]
call fcn.180002240
mov edx, 0x48
mov rcx, qword [rsp + 0x28]
call fcn.18004ec28
nop
test dil, 1
je 0x18000871b
mov r8, qword [rbp - 0x50]
mov r8, qword [r8 + 8]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x50]
call fcn.180002240
mov edx, 0x48
mov rcx, qword [rbp - 0x50]
call fcn.18004ec28
mov r8, qword [rbp - 0x60]
mov r8, qword [r8 + 8]
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x60]
call fcn.180002240
mov edx, 0x48
mov rcx, qword [rbp - 0x60]
call fcn.18004ec28
test bl, bl
jne 0x180008898
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0x346dc5d63886594b
imul rcx
mov rbx, rdx
sar rbx, 0xb
mov rax, rbx
shr rax, 0x3f
add rbx, rax
mov eax, dword [0x1800650b8]
test eax, eax
jne 0x18000875c
mov eax, ebx
mov dword [0x1800650b8], ebx
mov ecx, ebx
sub ecx, eax
mov eax, 0x3e8
cdq
idiv dword [0x1800640c0]
cmp ecx, eax
jl 0x180008898
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x180008898
lea rcx, [rbp - 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
movzx r9d, word [rbp - 0x2c]
shl r9d, 0x10
movzx eax, word [rbp - 0x30]
or r9, rax
mov edx, 0x204
mov r8d, 2
mov rcx, qword [0x180065258]
call qword [sym.imp.USER32.dll_SendMessageA]
movzx r9d, word [rbp - 0x2c]
shl r9d, 0x10
movzx eax, word [rbp - 0x30]
or r9, rax
xor r8d, r8d
mov edx, 0x205
mov rcx, qword [0x180065258]
call qword [sym.imp.USER32.dll_SendMessageA]
mov dword [0x1800650b8], ebx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1364], 0xffffffff
mov dword [rbp - 0x1c], eax
mov edx, 1
nop dword [rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 - 0x1c], eax
inc rdx
cmp rdx, 0x270
jb 0x180008800
mov dword [rbp - 0x20], 0x270
cvttss2si esi, dword [0x1800640bc]
btc esi, 0x1f
cvttss2si eax, dword [0x1800640b8]
btc eax, 0x1f
sub eax, esi
lea rcx, [rbp - 0x20]
cmp eax, 0xffffffff
jne 0x180008852
call fcn.180001400
mov ecx, eax
jmp 0x18000888b
lea ebx, [rax + 1]
call fcn.180001400
mov edi, ebx
mov ecx, eax
imul rcx, rdi
cmp ecx, ebx
jae 0x180008887
mov eax, ebx
neg eax
xor edx, edx
div ebx
mov ebx, edx
cmp ecx, edx
jae 0x180008887
lea rcx, [rbp - 0x20]
call fcn.180001400
mov ecx, eax
imul rcx, rdi
cmp ecx, ebx
jb 0x180008874
shr rcx, 0x20
lea eax, [rcx + rsi]
btc eax, 0x1f
mov dword [0x1800640c0], eax
mov rcx, qword [rbp + 0x1370]
xor rcx, rsp
call fcn.18004e890
lea r11, [rsp + 0x1480]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
sub rsp, 0x28
mov rax, qword [0x180064f88]
mov rcx, qword [rax + 0x38]
mov rax, qword [rcx]
call qword [rax]
test rax, rax
je 0x180010e7e
mov rax, qword [0x180064f88]
mov rcx, qword [rax + 0x40]
mov rax, qword [rcx]
call qword [rax]
test rax, rax
je 0x180010e7e
call fcn.1800100e0
call fcn.18000c800
cmp byte [0x180064f90], 0
je 0x180010e66
call fcn.18004c8b0
call fcn.18000a1c0
call fcn.180009560
call fcn.180008b70
add rsp, 0x28
jmp 0x1800083e0
mov byte [0x180065261], 0
add rsp, 0x28
ret