Function at 0x180007718
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2a8]
sub rsp, 0x380
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x18003f3c0]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov rdi, qword [0x180040688]
xor r15d, r15d
test rdi, rdi
je 0x180008328
cmp qword [0x180040648], r15
je 0x180008328
mov rdx, qword [0x180040580]
test rdx, rdx
je 0x180008328
cmp qword [0x180040678], r15
je 0x180008328
mov rax, qword [rdx + 0x290]
cmp qword [rax + 0x4dc], r15
je 0x180008328
cmp byte [0x1800405c7], r15b
mov rdi, qword [rdi + 0x5b4]
je 0x180007827
movsxd rcx, dword [0x1800405cc]
lea rax, [0x1800363f8]
mov ecx, dword [rax + rcx*4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007827
mov rcx, qword [0x180040640]
mov byte [rsp + 0x50], 1
test rcx, rcx
je 0x18000782c
call fcn.1800046b4
test al, al
je 0x18000782c
jmp 0x18000783a
mov byte [rsp + 0x50], r15b
mov qword [0x180040640], r15
mov byte [0x18004057f], r15b
movss xmm0, dword [0x18003a54c]
mov rcx, rdi
movss dword [rbp - 0x78], xmm0
call fcn.1800046b4
test al, al
je 0x18000830c
movss xmm12, dword [0x18003a43c]
xorps xmm14, xmm14
lea rax, [rdi + 0x2ac]
mov rcx, rdi
mov rsi, qword [rax]
mov qword [rbp + 8], rax
call fcn.1800046b4
test al, al
je 0x1800082f9
mov rcx, qword [rdi + 0x440]
call fcn.1800046b4
test al, al
je 0x1800082f9
test rcx, rcx
je 0x1800082f9
mov r8, qword [rcx + 0x4dc]
mov rcx, r8
call fcn.1800046b4
test al, al
je 0x1800082f9
test r8, r8
je 0x1800082f9
mov rdx, qword [0x180040580]
mov rax, qword [rdx + 0x290]
mov rcx, qword [rax + 0x4dc]
mov eax, dword [rcx + 0x298]
cmp dword [r8 + 0x298], eax
je 0x1800082f9
cmp rdi, qword [0x180040648]
je 0x1800082f9
mov eax, dword [rdi + 0x3c4]
dec eax
cmp eax, 0x270f
ja 0x1800082f9
mov rcx, qword [rdi + 0x48c]
lea r9, [rbp + 0x10]
movsd xmm9, qword [rdx + 0x8c]
lea r8, [rbp + 0x20]
mov r14d, dword [rdx + 0x94]
lea rdx, [rbp - 0x80]
mov r12d, dword [rdi + 0x88]
movups xmm10, xmmword [rcx + 0xa0]
mov eax, dword [rcx + 0xb8]
movsd xmm0, qword [rcx + 0xb0]
and dword [rbp - 0x7c], 0
movaps xmm11, xmm10
and dword [rbp - 0x80], 0
movaps xmm13, xmm10
mov r13, qword [0x180040688]
movaps xmm15, xmm10
and dword [rbp - 0x54], 0
and dword [rbp - 0x58], 0
and dword [rbp - 0x5c], 0
and dword [rbp - 0x60], 0
movsd qword [rbp + 0x178], xmm0
movaps xmm0, xmm10
shufps xmm0, xmm10, 0xff
shufps xmm11, xmm10, 0x55
subss xmm15, xmm0
movaps xmm1, xmm11
shufps xmm13, xmm10, 0xaa
subss xmm1, dword [rbp + 0x178]
addss xmm11, dword [rbp + 0x178]
addss xmm10, xmm0
mov dword [rbp + 0x180], eax
movsd xmm0, qword [rdi + 0x80]
mov rax, qword [0x180040678]
movss dword [rbp - 0x68], xmm1
movaps xmm1, xmm13
subss xmm1, dword [rbp + 0x17c]
addss xmm13, dword [rbp + 0x17c]
movsd xmm8, qword [rax + 0x494]
mov ebx, dword [rax + 0x49c]
movsd qword [rbp + 0x168], xmm0
movss dword [rsp + 0x58], xmm1
movss xmm1, dword [r13 + 0x4ec]
subss xmm1, dword [0x18003a41c]
movsd qword [rbp + 0x50], xmm0
movsd qword [rbp + 0x120], xmm0
movss xmm0, dword [rcx + 0x244]
lea rcx, [rbp + 0x30]
mov dword [rbp - 0x64], r12d
comiss xmm0, xmm1
mov dword [rbp + 0x18], ebx
mov dword [rbp + 0x28], r14d
mov dword [rbp + 0x38], r12d
movsd xmm0, qword [rdi + 0x80]
movsd qword [rbp + 0x40], xmm8
seta r15b
movsd qword [rbp + 0x10], xmm8
movsd qword [rbp + 0x20], xmm9
movsd qword [rbp + 0x30], xmm0
call fcn.180006f4c
movss xmm3, dword [rbp + 0x40]
movss xmm0, dword [rbp + 0x44]
subss xmm0, dword [rbp + 0x54]
subss xmm3, dword [rbp + 0x50]
movd xmm2, ebx
movd xmm1, r12d
subss xmm2, xmm1
mov byte [rsp + 0x51], al
mulss xmm0, xmm0
mulss xmm3, xmm3
mulss xmm2, xmm2
addss xmm0, xmm3
addss xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
divss xmm0, dword [0x18003a510]
movss xmm6, dword [0x18003a534]
subss xmm6, xmm0
comiss xmm14, xmm6
jbe 0x180007ab8
movaps xmm6, xmm14
movss xmm1, dword [0x1800405a0]
lea rcx, [rbp - 0x50]
movss xmm2, dword [0x180040578]
movss xmm7, dword [0x18003a534]
divss xmm6, dword [0x18003a538]
minss xmm7, xmm0
mulss xmm1, xmm12
movss xmm0, dword [rbp - 0x80]
mulss xmm2, xmm12
divss xmm7, dword [0x18003a538]
subss xmm0, xmm1
movss dword [rbp - 0x50], xmm0
movss xmm0, dword [rbp - 0x7c]
subss xmm0, xmm2
movss dword [rbp - 0x4c], xmm0
call fcn.180006dfc
test r15b, r15b
je 0x180007b1e
movaps xmm0, xmm14
jmp 0x180007b25
movaps xmm0, xmm6
movaps xmm6, xmm14
cmp qword [0x180040640], rdi
movss dword [rsp + 0x70], xmm0
sete al
movss dword [rsp + 0x74], xmm7
ucomiss xmm0, xmm14
mov dword [rsp + 0x7c], 0x3f800000
movss dword [rsp + 0x78], xmm6
jp 0x180007b51
je 0x180007b5d
movups xmm0, xmmword [0x18003f618]
movups xmmword [rsp + 0x70], xmm0
ucomiss xmm6, xmm14
jp 0x180007b65
je 0x180007b71
movups xmm0, xmmword [0x18003f678]
movups xmmword [rsp + 0x70], xmm0
xor r15d, r15d
test al, al
je 0x180007b84
movups xmm0, xmmword [0x18003f638]
movups xmmword [rsp + 0x70], xmm0
movss xmm1, dword [rbp - 0x68]
lea r9, [rbp + 0x60]
movaps xmm0, xmm15
movsd qword [rbp + 0x60], xmm8
unpcklps xmm0, xmm1
lea r8, [rbp + 0x70]
movss xmm1, dword [rsp + 0x58]
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x80]
movss dword [rbp + 0x88], xmm1
mov dword [rbp + 0x68], ebx
movsd qword [rbp + 0x70], xmm9
mov dword [rbp + 0x78], r14d
movsd qword [rbp + 0x80], xmm0
call fcn.180006f4c
test al, al
je 0x1800082f9
movaps xmm0, xmm10
movss dword [rbp + 0xb8], xmm13
unpcklps xmm0, xmm11
lea r9, [rbp + 0x90]
lea r8, [rbp + 0xa0]
movsd qword [rbp + 0xb0], xmm0
lea rdx, [rbp - 0x60]
movsd qword [rbp + 0x90], xmm8
lea rcx, [rbp + 0xb0]
mov dword [rbp + 0x98], ebx
movsd qword [rbp + 0xa0], xmm9
mov dword [rbp + 0xa8], r14d
call fcn.180006f4c
test al, al
je 0x1800082f9
movsd xmm0, qword [rbp + 0x168]
lea r9, [rbp + 0xc0]
lea r8, [rbp + 0xd0]
movsd qword [rbp + 0xe0], xmm0
lea rdx, [rbp - 0x80]
movsd qword [rbp + 0xc0], xmm8
lea rcx, [rbp + 0xe0]
mov dword [rbp + 0xc8], ebx
movsd qword [rbp + 0xd0], xmm9
mov dword [rbp + 0xd8], r14d
mov dword [rbp + 0xe8], r12d
call fcn.180006f4c
test al, al
je 0x1800082f9
mov rax, qword [rdi + 0x48c]
movss xmm13, dword [rbp - 0x5c]
movss xmm15, dword [rbp - 0x54]
movaps xmm9, xmm13
movss xmm1, dword [r13 + 0x4ec]
subss xmm9, xmm15
subss xmm1, dword [0x18003a41c]
movaps xmm10, xmm9
andps xmm9, xmmword [0x18003a740]
mulss xmm10, dword [0x18003a430]
cvtps2pd xmm0, xmm9
andps xmm10, xmmword [0x18003a740]
mulsd xmm0, qword [0x18003a490]
cvtpd2ps xmm6, xmm0
movss xmm0, dword [rax + 0x244]
mov rax, qword [rdi + 0x440]
comiss xmm0, xmm1
movss dword [rsp + 0x58], xmm6
seta r14b
cmp qword [rax + 0x290], r15
je 0x180007eb5
mov ebx, dword [rdi + 0x3c4]
lea rcx, [rdi + 0x1150]
mov edx, 8
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
cmp byte [0x18004061e], r15b
lea rcx, [rbp + 0x168]
mov rax, qword [rdi + 0x440]
movups xmm0, xmmword [rax + 0x290]
movdqu xmmword [rbp + 0x168], xmm0
je 0x180007e11
lea rdx, [rbp + 0x128]
call fcn.18000442c
mov r9, rax
cmp qword [rax + 0x18], 0xf
jbe 0x180007d71
mov r9, qword [rax]
mov dword [rsp + 0x60], 0xfdfbbbc6
mov rcx, r15
mov dword [rsp + 0x64], 0xd08781
mov byte [rsp + 0x68], 1
lea eax, [rcx - 0x63]
xor byte [rsp + rcx + 0x60], al
inc rcx
cmp rcx, 7
jb 0x180007d89
mov r8d, ebx
mov byte [rsp + 0x68], r15b
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x190]
call fcn.1800090c0
mov rdx, qword [rbp + 0x140]
cmp rdx, 0xf
jbe 0x180007df3
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007dee
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008390
call fcn.180031d3c
mov qword [rbp + 0x138], r15
mov qword [rbp + 0x140], 0xf
mov byte [rbp + 0x128], r15b
jmp 0x180007eb5
lea rdx, [rbp + 0x148]
call fcn.18000442c
mov r8, rax
cmp qword [rax + 0x18], 0xf
jbe 0x180007e2a
mov r8, qword [rax]
mov dword [rsp + 0x54], 0x100edb8
mov rcx, r15
lea eax, [rcx - 0x63]
xor byte [rsp + rcx + 0x54], al
inc rcx
cmp rcx, 2
jb 0x180007e35
lea rdx, [rsp + 0x54]
mov byte [rsp + 0x57], r15b
lea rcx, [rbp + 0x190]
call fcn.1800090c0
mov rdx, qword [rbp + 0x160]
cmp rdx, 0xf
jbe 0x180007e9c
mov rcx, qword [rbp + 0x148]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007e97
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008397
call fcn.180031d3c
mov qword [rbp + 0x158], r15
mov qword [rbp + 0x160], 0xf
mov byte [rbp + 0x148], r15b
mov al, byte [0x18004061b]
movss xmm8, dword [rbp - 0x80]
test al, al
je 0x180007f49
movaps xmm0, xmm10
lea rcx, [0x18003f668]
addss xmm0, xmm8
neg al
sbb eax, eax
and eax, 0xa
subss xmm0, dword [0x18003a514]
movss dword [rbp - 0x48], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm13
subss xmm0, dword [0x18003a50c]
movss dword [rbp - 0x44], xmm0
call fcn.18000a7ec
mov rcx, qword [0x18003f5c8]
lea rdx, [rbp + 0x190]
mov qword [rsp + 0x40], r15
lea r9, [rbp - 0x48]
movss dword [rsp + 0x38], xmm14
add rcx, 0x19c0
mov qword [rsp + 0x30], r15
movaps xmm2, xmm14
mov qword [rsp + 0x28], rdx
xor edx, edx
mov dword [rsp + 0x20], eax
call fcn.18002953c
cmp byte [0x18004061d], r15b
movss xmm11, dword [rbp - 0x7c]
je 0x180007fce
cmp byte [rsp + 0x51], r15b
je 0x180007fce
movss xmm0, dword [0x1800405a0]
lea rcx, [0x18003f628]
movss xmm1, dword [0x180040578]
mulss xmm0, xmm12
mulss xmm1, xmm12
movss dword [rbp - 0x40], xmm0
movaps xmm0, xmm8
unpcklps xmm0, xmm11
movsd qword [rbp + 0x168], xmm0
movss dword [rbp - 0x3c], xmm1
call fcn.18000a7ec
mov rcx, qword [0x18003f5c8]
lea r8, [rbp + 0x168]
movss xmm0, dword [0x18003a474]
lea rdx, [rbp - 0x40]
add rcx, 0x19c0
movss dword [rsp + 0x20], xmm0
mov r9d, eax
call fcn.180028d80
cmp byte [0x18004061c], r15b
je 0x180008175
mov eax, dword [0x180040614]
test eax, eax
jne 0x18000811b
movaps xmm7, xmm10
movss dword [rbp - 0x34], xmm15
movaps xmm6, xmm8
movss dword [rbp - 0x2c], xmm15
addss xmm7, xmm8
subss xmm6, xmm10
lea rcx, [rsp + 0x70]
movss dword [rbp - 0x38], xmm7
movss dword [rbp - 0x30], xmm6
call fcn.18000a7ec
mov rcx, qword [0x18003f5c8]
lea r8, [rbp - 0x38]
movss xmm0, dword [0x1800405c0]
lea rdx, [rbp - 0x30]
add rcx, 0x19c0
movss dword [rsp + 0x20], xmm0
mov r9d, eax
mov ebx, eax
call fcn.180028d80
mov rcx, qword [0x18003f5c8]
lea r8, [rbp - 0x28]
movss xmm0, dword [0x1800405c0]
lea rdx, [rbp - 0x20]
add rcx, 0x19c0
movss dword [rbp - 0x28], xmm7
mov r9d, ebx
movss dword [rbp - 0x24], xmm13
movss dword [rbp - 0x20], xmm6
movss dword [rbp - 0x1c], xmm13
movss dword [rsp + 0x20], xmm0
call fcn.180028d80
mov rcx, qword [0x18003f5c8]
lea r8, [rbp - 0x18]
movss xmm0, dword [0x1800405c0]
lea rdx, [rbp - 0x10]
add rcx, 0x19c0
movss dword [rbp - 0x18], xmm6
mov r9d, ebx
movss dword [rbp - 0x14], xmm13
movss dword [rbp - 0x10], xmm6
movss dword [rbp - 0xc], xmm15
movss dword [rsp + 0x20], xmm0
call fcn.180028d80
mov rcx, qword [0x18003f5c8]
lea r8, [rbp - 8]
movss xmm0, dword [0x1800405c0]
lea rdx, [rbp]
add rcx, 0x19c0
movss dword [rbp - 8], xmm7
mov r9d, ebx
movss dword [rbp - 4], xmm13
movss dword [rbp], xmm7
movss dword [rbp + 4], xmm15
movss dword [rsp + 0x20], xmm0
call fcn.180028d80
mov eax, dword [0x180040614]
movss xmm6, dword [rsp + 0x58]
cmp eax, 1
jne 0x180008175
lea rcx, [rsp + 0x70]
call fcn.18000a7ec
movaps xmm4, xmm6
mov dword [rsp + 0x58], eax
mulss xmm4, xmm12
lea rax, [rsp + 0x58]
movaps xmm5, xmm9
movaps xmm3, xmm9
mulss xmm5, xmm12
movaps xmm2, xmm6
subss xmm8, xmm4
movss xmm4, dword [0x1800405c0]
movss dword [rsp + 0x28], xmm4
subss xmm11, xmm5
mov qword [rsp + 0x20], rax
movaps xmm0, xmm8
movaps xmm1, xmm11
call fcn.1800069ec
cmp byte [rsp + 0x50], r15b
je 0x1800082f9
test r14b, r14b
je 0x1800082f9
cmp byte [0x18004057f], r15b
jne 0x1800082f9
mov rax, qword [0x180040678]
lea r9, [rbp + 0xf0]
and dword [rbp - 0x6c], r15d
lea r8, [rbp + 0x100]
and dword [rbp - 0x70], r15d
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x110]
movsd xmm0, qword [rax + 0x494]
mov eax, dword [rax + 0x49c]
mov dword [rbp + 0xf8], eax
mov rax, qword [0x180040580]
movsd qword [rbp + 0xf0], xmm0
movsd xmm0, qword [rax + 0x8c]
mov eax, dword [rax + 0x94]
movsd qword [rbp + 0x100], xmm0
movsd xmm0, qword [rbp + 0x120]
mov dword [rbp + 0x108], eax
mov eax, dword [rbp - 0x64]
movsd qword [rbp + 0x110], xmm0
mov dword [rbp + 0x118], eax
call fcn.180006f4c
test al, al
je 0x1800082f9
movss xmm9, dword [0x1800405a0]
movss xmm8, dword [0x180040578]
movss xmm13, dword [0x1800405e8]
movss xmm11, dword [rbp - 0x70]
movss xmm10, dword [rbp - 0x6c]
mulss xmm9, xmm12
mulss xmm8, xmm12
movaps xmm7, xmm9
movaps xmm1, xmm9
divss xmm7, dword [0x180043f68]
movaps xmm6, xmm8
subss xmm1, xmm11
divss xmm6, dword [0x180043f68]
movaps xmm0, xmm8
mulss xmm7, xmm13
subss xmm0, xmm10
mulss xmm1, xmm1
mulss xmm6, xmm13
mulss xmm0, xmm0
addss xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm1, xmm9
subss xmm1, xmm7
comiss xmm11, xmm1
jb 0x1800082cd
addss xmm7, xmm9
comiss xmm7, xmm11
jb 0x1800082cd
movaps xmm1, xmm8
subss xmm1, xmm6
comiss xmm10, xmm1
jb 0x1800082cd
addss xmm6, xmm8
mov al, 1
comiss xmm6, xmm10
jae 0x1800082d0
mov al, r15b
comiss xmm13, xmm0
ja 0x1800082da
test al, al
je 0x1800082f0
movss xmm1, dword [rbp - 0x78]
comiss xmm1, xmm0
jbe 0x1800082f0
movss dword [rbp - 0x78], xmm0
mov qword [0x180040640], rdi
mov rdi, qword [rbp + 8]
mov rdi, qword [rdi]
jmp 0x1800082fc
mov rdi, rsi
mov rcx, rdi
call fcn.1800046b4
test al, al
jne 0x180007864
mov rcx, qword [0x180040640]
call fcn.1800046b4
test al, al
je 0x180008328
mov byte [0x18004057f], 1
call fcn.1800071e0
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.180031ce0
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3