Function at 0x180015e90
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x1310]
mov eax, 0x1410
call fcn.180084af0
sub rsp, rax
mov rax, qword [0x1800a9010]
xor rax, rsp
mov qword [rbp + 0x1300], rax
mov r12, rcx
xor ebx, ebx
mov dword [rsp + 0x60], ebx
cmp byte [rcx + 0x30], bl
je 0x180015a94
cmp byte [0x1800ac610], bl
jne 0x180015a94
mov rax, qword [0x1800ac618]
mov rdx, qword [rax]
mov rcx, qword [0x1800ac608]
mov rax, qword [rcx]
mov r9, qword [rax + 0x2f8]
mov r8, qword [0x1800ac840]
call r9
mov rcx, qword [0x1800ac608]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0xc0]
xor r8d, r8d
mov rdx, rax
call r9
test al, al
je 0x180015a94
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
lea r8d, [rbx + 0x1c]
lea rdx, str.net.minecraft.item.ItemBlock
lea rcx, [rsp + 0x40]
call fcn.1800022d0
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x40]
call fcn.1800807e0
mov rax, qword [0x1800ac618]
mov rdi, qword [rax + 8]
mov rdx, qword [rdi]
test rdx, rdx
je 0x180015568
mov rcx, qword [0x1800ac608]
mov rax, qword [rcx]
mov r9, qword [rax + 0xc0]
xor r8d, r8d
call r9
test al, al
jne 0x180015568
mov rcx, qword [0x1800ac608]
mov rax, qword [rcx]
mov r9, qword [rax + 0x2f8]
mov r8, qword [0x1800ac7c0]
mov rdx, qword [rdi]
call r9
mov rsi, rax
test rax, rax
je 0x180015568
mov rcx, qword [0x1800ac608]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xa8]
mov rdx, rax
call r8
mov rdi, rax
mov qword [rsp + 0x20], rax
mov rcx, qword [0x1800ac608]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0xb8]
mov rdx, rsi
call rax
mov rdx, rdi
jmp 0x180015573
mov rdx, rbx
mov qword [rsp + 0x20], rbx
mov rdi, rbx
mov r8, qword [0x1800ac6b8]
mov rcx, qword [0x1800ac608]
call fcn.18000ab70
mov r14, rax
test rax, rax
je 0x1800155c1
mov rcx, qword [0x1800ac608]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xa8]
mov rdx, rax
call r8
mov rsi, rax
mov rcx, qword [0x1800ac608]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xb8]
mov rdx, r14
call r8
jmp 0x1800155c4
mov rsi, rbx
mov r14d, 0x18
mov rcx, qword [0x1800ac608]
test rcx, rcx
je 0x1800155f2
test rsi, rsi
je 0x1800155f2
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
mov rdx, rsi
call r8
mov rcx, qword [0x1800ac608]
test rcx, rcx
je 0x180015613
test rdi, rdi
je 0x180015613
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
mov rdx, rdi
call r8
mov rcx, qword [0x1800ac608]
test rsi, rsi
je 0x180015a94
cmp byte [r12 + 0x42], 0
je 0x1800157d0
mov rax, qword [0x1800ac618]
mov rdi, qword [rax + 8]
mov rdx, qword [rdi]
test rdx, rdx
je 0x1800156ce
mov rax, qword [rcx]
mov r9, qword [rax + 0xc0]
xor r8d, r8d
call r9
mov rcx, qword [0x1800ac608]
test al, al
jne 0x1800156ce
mov rax, qword [rcx]
mov r9, qword [rax + 0x2f8]
mov r8, qword [0x1800ac7c0]
mov rdx, qword [rdi]
call r9
mov rsi, rax
test rax, rax
je 0x1800156ba
mov rcx, qword [0x1800ac608]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xa8]
mov rdx, rax
call r8
mov rdi, rax
mov qword [rsp + 0x20], rax
mov rcx, qword [0x1800ac608]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0xb8]
mov rdx, rsi
call rax
mov rdx, rdi
mov rcx, qword [0x1800ac608]
jmp 0x1800156d9
mov rdi, rbx
mov qword [rsp + 0x20], rbx
mov rdx, rbx
mov rcx, qword [0x1800ac608]
jmp 0x1800156d9
mov rdi, rbx
mov qword [rsp + 0x20], rbx
mov rdx, rbx
mov dword [rsp + 0x60], 0x39
mov r8, qword [0x1800ac6b8]
call fcn.18000ab70
mov r14, rax
test rax, rax
je 0x18001572f
mov rcx, qword [0x1800ac608]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xa8]
mov rdx, rax
call r8
mov rsi, rax
mov qword [rsp + 0x28], rax
mov rcx, qword [0x1800ac608]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0xb8]
mov rdx, r14
call rax
mov rdx, rsi
jmp 0x18001573a
mov rsi, rbx
mov qword [rsp + 0x28], rbx
mov rdx, rbx
mov dword [rsp + 0x60], 0x7b
mov r8, qword [0x1800ac6a8]
mov rcx, qword [0x1800ac608]
call fcn.18000ab70
mov r14, rax
test rax, rax
je 0x180015794
mov rcx, qword [0x1800ac608]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xa8]
mov rdx, rax
call r8
mov rbx, rax
mov qword [rsp + 0x30], rax
mov rcx, qword [0x1800ac608]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0xb8]
mov rdx, r14
call rax
jmp 0x180015799
mov qword [rsp + 0x30], rbx
mov rdx, rbx
mov r14d, 0xff
mov dword [rsp + 0x60], r14d
mov rcx, qword [0x1800ac608]
mov rax, qword [rcx]
mov r9, qword [rax + 0x100]
mov r8, qword [rsp + 0x38]
call r9
mov rcx, qword [0x1800ac608]
test al, al
jne 0x1800157df
mov r15b, 1
jmp 0x1800157e2
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x30]
xor r15b, r15b
test r14b, 4
je 0x180015812
and r14d, 0xfffffffb
mov dword [rsp + 0x60], r14d
test rcx, rcx
je 0x180015812
test rbx, rbx
je 0x180015812
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
mov rdx, rbx
call r8
mov rcx, qword [0x1800ac608]
test r14b, 2
je 0x180015842
and r14d, 0xfffffffd
mov dword [rsp + 0x60], r14d
test rcx, rcx
je 0x180015842
test rsi, rsi
je 0x180015842
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
mov rdx, rsi
call r8
mov rcx, qword [0x1800ac608]
test r14b, 1
je 0x180015863
test rcx, rcx
je 0x180015863
test rdi, rdi
je 0x180015863
mov rax, qword [rcx]
mov r8, qword [rax + 0xb0]
mov rdx, rdi
call r8
nop
test r15b, r15b
jne 0x180015a94
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0x346dc5d63886594b
imul rcx
mov rbx, rdx
sar rbx, 0xb
mov rax, rbx
shr rax, 0x3f
add rbx, rax
mov eax, dword [0x1800ab600]
test eax, eax
jne 0x1800158a5
mov eax, ebx
mov dword [0x1800ab600], ebx
mov ecx, ebx
sub ecx, eax
mov eax, 0x3e8
cdq
idiv dword [str._n_n_n_n]
cmp ecx, eax
jl 0x180015a94
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180015a94
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_GetCursorPos]
movzx r9d, word [rsp + 0x64]
shl r9d, 0x10
movzx eax, word [rsp + 0x60]
or r9, rax
mov edx, 0x204
mov r8d, 2
mov rcx, qword [0x1800ac638]
call qword [sym.imp.USER32.dll_SendMessageA]
movzx r9d, word [rsp + 0x64]
shl r9d, 0x10
movzx eax, word [rsp + 0x60]
or r9, rax
xor r8d, r8d
mov edx, 0x205
mov rcx, qword [0x1800ac638]
call qword [sym.imp.USER32.dll_SendMessageA]
mov dword [0x1800ab600], ebx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x12f4], 0xffffffff
mov dword [rsp + 0x74], eax
mov edx, 1
mov r9d, 0x270
nop dword [rax]
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rsp + rdx*4 + 0x74], eax
inc rdx
cmp rdx, r9
jb 0x180015960
mov dword [rsp + 0x70], r9d
cvttss2si ecx, dword [r12 + 0x3c]
cvttss2si edx, dword [r12 + 0x38]
lea eax, [rcx - 0x80000000]
mov r14d, 0x80000000
lea esi, [rcx + r14]
cmp ecx, r14d
cmovae esi, eax
lea eax, [rdx - 0x80000000]
lea ebx, [rdx + r14]
cmp edx, r14d
cmovae ebx, eax
sub ebx, esi
cmp ebx, 0xffffffff
jne 0x180015a32
lea r8, [rsp + 0x78]
mov edx, dword [r8 - 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, dword [r8 - 4]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
shr edx, 1
xor ecx, edx
xor ecx, dword [r8 + 0x630]
mov dword [r8 + 0x9bc], ecx
lea r8, [r8 + 4]
sub r9, 1
jne 0x1800159c0
mov eax, dword [rsp + 0x70]
mov ecx, dword [rsp + rax*4 + 0x74]
mov eax, ecx
shr eax, 0xb
and eax, dword [rbp + 0x12f4]
xor ecx, eax
mov eax, ecx
and eax, 0xff3a58ad
shl eax, 7
xor ecx, eax
mov eax, ecx
and eax, 0xffffdf8c
shl eax, 0xf
xor ecx, eax
mov r8d, ecx
shr r8d, 0x12
xor r8d, ecx
jmp 0x180015a7a
inc ebx
lea rcx, [rsp + 0x70]
call fcn.180005d70
mov edi, ebx
mov r8d, eax
imul r8, rdi
cmp r8d, ebx
jae 0x180015a76
mov eax, ebx
neg eax
xor edx, edx
div ebx
mov ebx, edx
cmp r8d, edx
jae 0x180015a76
nop dword [rax + rax]
lea rcx, [rsp + 0x70]
call fcn.180005d70
mov r8d, eax
imul r8, rdi
cmp r8d, ebx
jb 0x180015a60
shr r8, 0x20
lea edx, [r8 + rsi]
lea eax, [rdx + r14]
lea ecx, [rdx - 0x80000000]
cmp edx, r14d
cmovae ecx, eax
mov dword [str._n_n_n_n], ecx
mov rcx, qword [rbp + 0x1300]
xor rcx, rsp
call fcn.180083910
lea r11, [rsp + 0x1410]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov rcx, qword [rcx + 8]
jmp 0x180015400