Function at 0x18000e5f0
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
mov eax, 0x2130
call fcn.180072830
sub rsp, rax
movaps xmmword [rsp + 0x2120], xmm6
movaps xmmword [rsp + 0x2110], xmm7
movaps xmmword [rsp + 0x2100], xmm8
movaps xmmword [rsp + 0x20f0], xmm9
movaps xmmword [rsp + 0x20e0], xmm10
movaps xmmword [rsp + 0x20d0], xmm11
mov rax, qword [0x180092040]
xor rax, rsp
mov qword [rsp + 0x20c0], rax
xor r14d, r14d
mov dword [rsp + 0x30], r14d
mov eax, dword [0x1800e0b34]
test eax, eax
jne 0x18000e68b
mov ecx, dword [0x1800e0b30]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
setne byte [0x1800e0b08]
mov eax, dword [0x1800e0b34]
cmp eax, 1
jne 0x18000e6ae
mov ecx, dword [0x1800e0b30]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18000e6ae
cmp byte [0x1800e0b08], r14b
sete byte [0x1800e0b08]
cmp byte [0x1800e0b08], r14b
je 0x18000f232
xor r13d, r13d
movsd xmm11, qword [0x180085748]
movss xmm10, dword [0x180085840]
movss xmm9, dword [0x180085860]
mov dword [rsp + 0x34], r13d
movsxd rcx, r13d
mov rax, qword [0x1800e04e0]
mov rdx, qword [0x1800e04d8]
sub rax, rdx
sar rax, 3
cmp rcx, rax
jae 0x18000f232
mov rax, qword [0x1800e05a8]
test rax, rax
je 0x18000f203
cmp qword [rax + 0x260], 0
je 0x18000f203
mov r15, qword [rdx + rcx*8]
test r15, r15
jne 0x18000e72b
jmp 0x18000f22a
mov qword [rsp + 0xa0], r15
lea r12, [r15 + 0x140]
mov qword [rsp + 0xa8], r12
mov rcx, qword [r12]
call fcn.1800670b0
test al, al
jne 0x18000e754
jmp 0x18000f22a
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.1800669f0
movsd xmm0, qword [rax + 0x10]
movsd qword [rsp + 0x38], xmm0
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x40], eax
jmp 0x18000e7aa
mov rax, qword [0x1800e05a8]
lea rdx, [rsp + 0x70]
mov rcx, qword [rax + 0x260]
call fcn.1800669f0
mov rbx, rax
movss xmm0, dword [rsp + 0x38]
subss xmm0, dword [rax + 0x10]
cvtps2pd xmm0, xmm0
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm7, xmm0
movss xmm1, dword [rsp + 0x3c]
subss xmm1, dword [rbx + 0x14]
cvtps2pd xmm0, xmm1
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movss xmm8, dword [rsp + 0x40]
movaps xmm1, xmm8
subss xmm1, dword [rbx + 0x18]
cvtps2pd xmm0, xmm1
movaps xmm1, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm7
addsd xmm6, xmm0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm6
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x18000e835
xorps xmm7, xmm7
sqrtss xmm7, xmm1
jmp 0x18000e840
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm7, xmm0
divss xmm7, xmm10
movd xmm1, dword [0x1800e0b38]
cvtdq2ps xmm1, xmm1
comiss xmm7, xmm1
jb 0x18000e85a
jmp 0x18000f22a
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.180066100
mov rdi, rax
or r14d, 1
mov dword [rsp + 0x30], r14d
mov rax, qword [rax + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x18000e881
mov rdi, qword [rdi]
cmp rax, 0xf
jb 0x18000e8f7
lea rsi, [rax + rdi]
lea r8, [rsi - 0xe]
sub r8, rdi
mov edx, 0x50
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x18000e8f7
nop word [rax + rax]
mov r8d, 0xf
lea rdx, str.PropagandaFlyer
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18000e8ea
inc rbx
lea r8, [rsi - 0xe]
sub r8, rbx
mov edx, 0x50
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x18000e8b0
jmp 0x18000e8f7
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
jne 0x18000e9dd
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.180066100
mov rdi, rax
or r14d, 2
mov dword [rsp + 0x30], r14d
mov rax, qword [rax + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x18000e91e
mov rdi, qword [rdi]
cmp rax, 0xc
jb 0x18000e988
lea rsi, [rax + rdi]
lea r8, [rsi - 0xb]
sub r8, rdi
mov edx, 0x53
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x18000e988
nop dword [rax]
nop dword [rax + rax]
mov r8d, 0xc
lea rdx, str.SO_Poster_01
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18000e9d4
inc rbx
lea r8, [rsi - 0xb]
sub r8, rbx
mov edx, 0x53
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x18000e950
xor bl, bl
test r14b, 2
je 0x18000e9fd
and r14d, 0xfffffffd
mov dword [rsp + 0x30], r14d
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x18000e9e6
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e9e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000e9e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x18000e988
mov bl, 1
jmp 0x18000e98a
call fcn.1800715c0
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
test r14b, 1
je 0x18000ea4f
and r14d, 0xfffffffe
mov dword [rsp + 0x30], r14d
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x18000ea4f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ea4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ea4a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800715c0
test bl, bl
je 0x18000ea5f
addss xmm8, xmm9
movss dword [rsp + 0x40], xmm8
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.180066100
mov rdi, rax
mov rax, qword [rax + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x18000ea7d
mov rdi, qword [rdi]
cmp rax, 0x13
jb 0x18000eae8
lea rsi, [rax + rdi]
lea r8, [rsi - 0x12]
sub r8, rdi
mov edx, 0x46
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x18000eae8
nop dword [rax]
nop word [rax + rax]
mov r8d, 0x13
lea rdx, str.FrequencyMatchPanel
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18000eb2d
inc rbx
lea r8, [rsi - 0x12]
sub r8, rbx
mov edx, 0x46
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x18000eab0
mov rbx, 0xffffffffffffffff
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x18000eb37
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eb32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000eb32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rbx, rdi
jmp 0x18000eaef
call fcn.1800715c0
cmp rbx, 0xffffffffffffffff
je 0x18000eb49
addss xmm8, xmm9
movss dword [rsp + 0x40], xmm8
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x38]
mov rcx, qword [0x1800e05a8]
call fcn.1800678d0
movzx eax, byte [r15 + 0x279]
cmp al, 0x1b
jne 0x18000eb9c
cmp byte [0x1800e0b3e], 0
je 0x18000ebd1
cvttss2si eax, xmm7
mov dword [rsp + 0x20], eax
lea r9, [0x1800e0b40]
lea r8, str._Quest_
movsd xmm6, qword [rsp + 0x48]
movq rdx, xmm6
call fcn.18000f290
jmp 0x18000ebd7
cmp al, 0x1a
jne 0x18000ebd1
cmp byte [0x1800e0c18], 0
je 0x18000ebd1
cvttss2si eax, xmm7
mov dword [rsp + 0x20], eax
lea r9, [0x1800e0c1c]
lea r8, str._Document_
movsd xmm6, qword [rsp + 0x48]
movq rdx, xmm6
call fcn.18000f290
jmp 0x18000ebd7
movsd xmm6, qword [rsp + 0x48]
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.180066100
mov rdi, rax
or r14d, 4
mov dword [rsp + 0x30], r14d
mov rax, qword [rax + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x18000ebfe
mov rdi, qword [rdi]
cmp rax, 0x13
jb 0x18000ec68
lea rsi, [rax + rdi]
lea r8, [rsi - 0x12]
sub r8, rdi
mov edx, 0x46
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x18000ec68
nop dword [rax]
nop dword [rax + rax]
mov r8d, 0x13
lea rdx, str.FrequencyMatchPanel
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18000ecb7
inc rbx
lea r8, [rsi - 0x12]
sub r8, rbx
mov edx, 0x46
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x18000ec30
xor bl, bl
test r14b, 4
je 0x18000ecd2
and r14d, 0xfffffffb
mov dword [rsp + 0x30], r14d
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x18000ecd2
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eccd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000eccd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x18000ec68
cmp byte [0x1800e0b50], 0
je 0x18000ec68
mov bl, 1
jmp 0x18000ec6a
call fcn.1800715c0
test bl, bl
je 0x18000ecfb
cvttss2si eax, xmm7
mov dword [rsp + 0x20], eax
lea r9, [0x1800e0b54]
lea r8, str._Frequency_Panel_
movq rdx, xmm6
call fcn.18000f290
jmp 0x18000f1fb
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.180066100
mov rdi, rax
or r14d, 8
mov dword [rsp + 0x30], r14d
mov rax, qword [rax + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x18000ed22
mov rdi, qword [rdi]
cmp rax, 0xf
jb 0x18000ed97
lea rsi, [rax + rdi]
lea r8, [rsi - 0xe]
sub r8, rdi
mov edx, 0x50
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x18000ed97
nop dword [rax + rax]
mov r8d, 0xf
lea rdx, str.PropagandaFlyer
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18000ed8a
inc rbx
lea r8, [rsi - 0xe]
sub r8, rbx
mov edx, 0x50
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x18000ed50
jmp 0x18000ed97
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
jne 0x18000ee7d
lea rdx, [rsp + 0x50]
mov rcx, r15
call fcn.180066100
mov rdi, rax
or r14d, 0x10
mov dword [rsp + 0x30], r14d
mov rax, qword [rax + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x18000edbe
mov rdi, qword [rdi]
cmp rax, 0xc
jb 0x18000ee28
lea rsi, [rax + rdi]
lea r8, [rsi - 0xb]
sub r8, rdi
mov edx, 0x53
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x18000ee28
nop dword [rax]
nop dword [rax + rax]
mov r8d, 0xc
lea rdx, str.SO_Poster_01
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18000ee74
inc rbx
lea r8, [rsi - 0xb]
sub r8, rbx
mov edx, 0x53
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x18000edf0
xor bl, bl
test r14b, 0x10
je 0x18000eea6
and r14d, 0xffffffef
mov dword [rsp + 0x30], r14d
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x18000ee8f
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ee8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ee8a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x18000ee28
cmp byte [0x1800e0c04], 0
je 0x18000ee28
mov bl, 1
jmp 0x18000ee2a
call fcn.1800715c0
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
test r14b, 8
je 0x18000eef8
and r14d, 0xfffffff7
mov dword [rsp + 0x30], r14d
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x18000eef8
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eef3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000eef3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800715c0
test bl, bl
je 0x18000ef21
cvttss2si eax, xmm7
mov dword [rsp + 0x20], eax
lea r9, [0x1800e0c08]
lea r8, str._Poster_
movq rdx, xmm6
call fcn.18000f290
jmp 0x18000f1fb
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.180066100
mov rdi, rax
or r14d, 0x20
mov dword [rsp + 0x30], r14d
mov rax, qword [rax + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x18000ef48
mov rdi, qword [rdi]
cmp rax, 0x12
jb 0x18000efa8
lea rsi, [rax + rdi]
lea r8, [rsi - 0x11]
sub r8, rdi
mov edx, 0x47
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x18000efa8
nop
mov r8d, 0x12
lea rdx, str.GeneratorObjective
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18000eff7
inc rbx
lea r8, [rsi - 0x11]
sub r8, rbx
mov edx, 0x47
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x18000ef70
xor bl, bl
test r14b, 0x20
je 0x18000f012
and r14d, 0xffffffdf
mov dword [rsp + 0x30], r14d
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x18000f012
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f00d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000f00d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x18000efa8
cmp byte [0x1800e0b78], 0
je 0x18000efa8
mov bl, 1
jmp 0x18000efaa
call fcn.1800715c0
test bl, bl
je 0x18000f04c
mov rcx, qword [r12]
call fcn.1800670b0
test al, al
je 0x18000f1fb
cvttss2si eax, xmm7
mov dword [rsp + 0x20], eax
lea r9, [0x1800e0b7c]
lea r8, str._Generator_
movq rdx, xmm6
call fcn.18000f290
jmp 0x18000f1fb
call fcn.180004710
mov rcx, qword [r15 + 0x10]
test rax, rax
je 0x18000f1fb
test rcx, rcx
je 0x18000f1fb
cmp rcx, rax
je 0x18000f07a
mov rcx, qword [rcx + 0x40]
test rcx, rcx
jne 0x18000f067
jmp 0x18000f1fb
cmp byte [r15 + 0x5bc], 0xf
jne 0x18000f0b7
cmp byte [0x1800e0bf0], 0
je 0x18000f0b7
cmp byte [r15 + 0x8f1], 0
jne 0x18000f0b7
cvttss2si eax, xmm7
mov dword [rsp + 0x20], eax
lea r9, [0x1800e0bf4]
lea r8, str._Material_Box_
movq rdx, xmm6
call fcn.18000f290
cmp byte [r15 + 0x5bc], 0xe
jne 0x18000f0ea
cmp byte [0x1800e0c2c], 0
je 0x18000f0ea
cvttss2si eax, xmm7
mov dword [rsp + 0x20], eax
lea r9, [0x1800e0c30]
lea r8, str._Severed_Head_
movq rdx, xmm6
call fcn.18000f290
mov rcx, r15
call fcn.180067c40
test al, al
je 0x18000f0fb
jmp 0x18000f22a
movzx eax, byte [r15 + 0x5bc]
cmp al, 0xa
jne 0x18000f139
cmp byte [0x1800e0b8c], 0
je 0x18000f1fb
cvttss2si eax, xmm7
mov dword [rsp + 0x20], eax
lea r9, [0x1800e0b90]
lea r8, str._Acid_Bottle_
movq rdx, xmm6
call fcn.18000f290
jmp 0x18000f1fb
cmp al, 0xc
jne 0x18000f16f
cmp byte [0x1800e0b64], 0
je 0x18000f1fb
cvttss2si eax, xmm7
mov dword [rsp + 0x20], eax
lea r9, [0x1800e0b68]
lea r8, str._Gas_Canister_
movq rdx, xmm6
call fcn.18000f290
jmp 0x18000f1fb
cmp al, 7
jne 0x18000f19e
cmp byte [0x1800e0ba0], 0
je 0x18000f1fb
cvttss2si eax, xmm7
mov dword [rsp + 0x20], eax
lea r9, [0x1800e0ba4]
lea r8, str._Child_Mannequin_
movq rdx, xmm6
call fcn.18000f290
jmp 0x18000f1fb
cmp al, 4
jne 0x18000f1cd
cmp byte [0x1800e0bb4], 0
je 0x18000f1fb
cvttss2si eax, xmm7
mov dword [rsp + 0x20], eax
lea r9, [0x1800e0bb8]
lea r8, str._Diaporama_Wheel_
movq rdx, xmm6
call fcn.18000f290
jmp 0x18000f1fb
cmp al, 5
jne 0x18000f1fb
cmp byte [0x1800e0bdc], 0
je 0x18000f1fb
cvttss2si eax, xmm7
mov dword [rsp + 0x20], eax
lea r9, [0x1800e0be0]
lea r8, str._Acid_Bucket_
movq rdx, xmm6
call fcn.18000f290
nop
inc r13d
jmp 0x18000e6d9
jmp 0x18000f22a
inc r13d
jmp 0x18000e6d9
mov rcx, qword [rsp + 0x20c0]
xor rcx, rsp
call fcn.1800715a0
lea r11, [rsp + 0x2130]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
ret