Function at 0x1800065a0
Capabilities:
Create process on windows
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x228]
sub rsp, 0x328
mov rax, qword gs:[0x58]
mov ecx, dword [0x18000f958]
mov r13d, 0x478
mov esi, 0x458
mov ebx, 0x1f0
mov rdx, qword [rax + rcx*8]
add r13, rdx
mov eax, 0x21c
add rax, rdx
mov qword [rbp + 0x280], r13
mov qword [rbp + 0x160], rax
add rsi, rdx
add rbx, rdx
mov qword [rbp + 0x270], rsi
lea rax, [r13 + 0xb]
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x3a]
sub rax, r13
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x30]
sub rax, r13
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x31]
sub rax, r13
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x32]
sub rax, r13
mov qword [rbp - 0x70], rax
lea rax, [rsp + 0x33]
sub rax, r13
mov qword [rbp - 0x68], rax
lea rax, [rsp + 0x34]
sub rax, r13
mov qword [rbp - 0x60], rax
lea rax, [rsp + 0x35]
sub rax, r13
mov qword [rbp - 0x58], rax
lea rax, [rsp + 0x36]
sub rax, r13
mov qword [rbp - 0x50], rax
mov eax, 0x240
add rax, rdx
mov qword [rbp - 0x48], rax
lea rax, [rsi + 0xb]
mov qword [rbp - 0x40], rax
lea rax, [rsp + 0x3a]
sub rax, rsi
mov qword [rbp - 0x38], rax
lea rax, [rsp + 0x30]
sub rax, rsi
mov qword [rbp - 0x30], rax
lea rax, [rsp + 0x31]
sub rax, rsi
mov qword [rbp - 0x28], rax
lea rax, [rsp + 0x32]
sub rax, rsi
mov qword [rbp - 0x20], rax
lea rax, [rsp + 0x33]
sub rax, rsi
mov qword [rbp - 0x18], rax
lea rax, [rsp + 0x34]
sub rax, rsi
mov qword [rbp - 0x10], rax
lea rax, [rsp + 0x35]
sub rax, rsi
mov qword [rbp - 8], rax
lea rax, [rsp + 0x36]
sub rax, rsi
mov qword [rbp], rax
lea rax, [rsp + 0x37]
sub rax, rsi
mov qword [rbp + 8], rax
mov eax, 0x340
add rax, rdx
mov qword [rbp + 0x10], rax
lea rax, [rbx + 0xb]
mov qword [rbp + 0x18], rax
lea rax, [rsp + 0x3a]
sub rax, rbx
mov qword [rbp + 0x20], rax
lea rax, [rsp + 0x30]
mov r14d, 0x18
sub rax, rbx
mov edi, 0x2f8
mov qword [rbp + 0x28], rax
add r14, rdx
add rdi, rdx
mov qword [rbp + 0x278], r14
lea rax, [rsp + 0x31]
mov qword [rsp + 0x58], rdi
sub rax, rbx
mov qword [rbp + 0x30], rax
lea rax, [rsp + 0x32]
sub rax, rbx
mov qword [rbp + 0x38], rax
lea rax, [rsp + 0x33]
sub rax, rbx
mov qword [rbp + 0x40], rax
lea rax, [rsp + 0x34]
sub rax, rbx
mov qword [rbp + 0x48], rax
lea rax, [rsp + 0x35]
sub rax, rbx
mov qword [rbp + 0x50], rax
lea rax, [rsp + 0x36]
sub rax, rbx
mov qword [rbp + 0x58], rax
mov eax, 0x120
add rax, rdx
mov qword [rbp + 0x60], rax
lea rax, [r14 + 0xb]
mov qword [rbp + 0x68], rax
lea rax, [rsp + 0x3a]
sub rax, r14
mov qword [rbp + 0x70], rax
lea rax, [rsp + 0x30]
sub rax, r14
mov qword [rbp + 0x78], rax
lea rax, [rsp + 0x31]
sub rax, r14
mov qword [rbp + 0x80], rax
lea rax, [rsp + 0x32]
sub rax, r14
mov qword [rbp + 0x88], rax
lea rax, [rsp + 0x33]
sub rax, r14
mov qword [rbp + 0x90], rax
lea rax, [rsp + 0x34]
sub rax, r14
mov qword [rbp + 0x98], rax
lea rax, [rsp + 0x35]
sub rax, r14
mov qword [rbp + 0xa0], rax
lea rax, [rsp + 0x36]
sub rax, r14
mov qword [rbp + 0xa8], rax
lea rax, [rsp + 0x37]
sub rax, r14
mov qword [rbp + 0xb0], rax
mov eax, 0x46c
add rax, rdx
mov qword [rbp + 0xb8], rax
lea rax, [rdi + 0xb]
mov qword [rbp + 0xc0], rax
lea rax, [rsp + 0x3a]
sub rax, rdi
mov qword [rbp + 0xc8], rax
lea rax, [rsp + 0x30]
sub rax, rdi
mov qword [rbp + 0xd0], rax
lea rax, [rsp + 0x31]
sub rax, rdi
mov qword [rbp + 0xd8], rax
lea rax, [rsp + 0x32]
sub rax, rdi
mov qword [rbp + 0xe0], rax
lea rax, [rsp + 0x33]
sub rax, rdi
mov qword [rbp + 0xe8], rax
lea rax, [rsp + 0x34]
sub rax, rdi
mov qword [rbp + 0xf0], rax
lea rax, [rsp + 0x35]
sub rax, rdi
mov r15d, 0x310
mov qword [rbp + 0xf8], rax
add r15, rdx
lea rax, [rsp + 0x36]
mov r12d, 0x328
sub rax, rdi
mov qword [rbp + 0x288], r15
mov qword [rbp + 0x100], rax
mov eax, 0x370
add rax, rdx
mov qword [rbp + 0x108], rax
lea rax, [r15 + 0xb]
mov qword [rbp + 0x110], rax
lea rax, [rsp + 0x3a]
sub rax, r15
mov qword [rbp + 0x118], rax
lea rax, [rsp + 0x30]
sub rax, r15
mov qword [rbp + 0x120], rax
lea rax, [rsp + 0x31]
sub rax, r15
mov qword [rbp + 0x128], rax
lea rax, [rsp + 0x32]
sub rax, r15
mov qword [rbp + 0x130], rax
lea rax, [rsp + 0x33]
sub rax, r15
mov qword [rbp + 0x138], rax
lea rax, [rsp + 0x34]
sub rax, r15
mov qword [rbp + 0x140], rax
lea rax, [rsp + 0x35]
sub rax, r15
mov qword [rbp + 0x148], rax
lea rax, [rsp + 0x36]
sub rax, r15
mov qword [rbp + 0x150], rax
lea rax, [rsp + 0x37]
sub rax, r15
mov qword [rbp + 0x158], rax
mov eax, 0x374
add rax, rdx
mov qword [rbp + 0x1b8], rax
mov eax, 0x208
add rax, rdx
mov qword [rsp + 0x60], rax
lea rcx, [rax + 0xb]
mov qword [rbp + 0x168], rcx
lea rcx, [rsp + 0x3a]
sub rcx, rax
mov qword [rbp + 0x170], rcx
lea rcx, [rsp + 0x30]
sub rcx, rax
mov qword [rbp + 0x178], rcx
lea rcx, [rsp + 0x31]
sub rcx, rax
mov qword [rbp + 0x180], rcx
lea rcx, [rsp + 0x32]
sub rcx, rax
mov qword [rbp + 0x188], rcx
lea rcx, [rsp + 0x33]
sub rcx, rax
mov qword [rbp + 0x190], rcx
lea rcx, [rsp + 0x34]
sub rcx, rax
mov qword [rbp + 0x198], rcx
lea rcx, [rsp + 0x35]
sub rcx, rax
mov qword [rbp + 0x1a0], rcx
lea rcx, [rsp + 0x36]
sub rcx, rax
mov eax, 0x23c
add rax, rdx
mov qword [rbp + 0x1a8], rcx
add r12, rdx
mov qword [rbp + 0x1b0], rax
mov qword [rsp + 0x50], r12
lea rax, [r12 + 0xb]
mov qword [rbp + 0x210], rax
lea rax, [rsp + 0x3a]
sub rax, r12
mov qword [rbp + 0x1c0], rax
lea rax, [rsp + 0x30]
sub rax, r12
mov qword [rbp + 0x1c8], rax
lea rax, [rsp + 0x31]
sub rax, r12
mov qword [rbp + 0x1d0], rax
lea rax, [rsp + 0x32]
sub rax, r12
mov qword [rbp + 0x1d8], rax
lea rax, [rsp + 0x33]
sub rax, r12
mov qword [rbp + 0x1e0], rax
lea rax, [rsp + 0x34]
sub rax, r12
mov qword [rbp + 0x1e8], rax
lea rax, [rsp + 0x35]
sub rax, r12
mov qword [rbp + 0x1f0], rax
lea rax, [rsp + 0x36]
sub rax, r12
mov qword [rbp + 0x1f8], rax
lea rax, [rsp + 0x37]
sub rax, r12
mov qword [rbp + 0x200], rax
mov ecx, 0x26
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180006e76
cmp byte [0x18000f938], 0
sete al
mov byte [0x18000f938], al
test al, al
je 0x180006c53
mov rcx, qword [rbp + 0x160]
mov eax, dword [rcx]
test al, 1
jne 0x180006bb1
movups xmm0, xmmword [0x18000c850]
mov rdi, qword [rsp + 0x78]
or eax, 1
mov r12, qword [rbp - 0x80]
mov r15, qword [rbp - 0x78]
mov r14, qword [rbp - 0x70]
mov rsi, qword [rbp - 0x68]
mov dword [rcx], eax
mov eax, dword [0x18000c860]
mov rcx, qword [rsp + 0x70]
mov qword [r13], 0
mov word [r13 + 8], 0
mov dword [rsp + 0x40], eax
xor eax, eax
mov qword [r13 + 0xa], rax
xor edx, edx
mov r13, qword [rbp - 0x60]
movaps xmmword [rsp + 0x30], xmm0
nop dword [rax]
movzx eax, byte [rdi + rcx - 0xb]
add edx, 8
mov byte [rcx - 1], al
movzx eax, byte [r12 + rcx]
mov byte [rcx], al
movzx eax, byte [r15 + rcx]
mov byte [rcx + 1], al
movzx eax, byte [r14 + rcx]
mov byte [rcx + 2], al
movzx eax, byte [rsi + rcx]
mov byte [rcx + 3], al
movzx eax, byte [rcx + r13]
mov byte [rcx + 4], al
lea rcx, [rcx + 8]
mov rax, qword [rbp - 0x58]
movzx eax, byte [rax + rcx - 8]
mov byte [rcx - 3], al
mov rax, qword [rbp - 0x50]
movzx eax, byte [rax + rcx - 8]
mov byte [rcx - 2], al
cmp edx, 8
jb 0x180006b40
mov r14, qword [rbp + 0x278]
mov r15, qword [rbp + 0x288]
mov r12, qword [rsp + 0x50]
mov r13, qword [rbp + 0x280]
mov rdi, qword [rsp + 0x58]
cmp byte [r13 + 9], 0
jne 0x180006c46
xor edx, edx
nop
mov ecx, dword [r13 + 4]
mov r8d, dword [r13]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x180006be0
movsxd rax, edx
inc cl
xor byte [rax + r13 + 0xa], cl
inc dword [r13]
jmp 0x180006bc0
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x180006bf9
movsxd rax, edx
add cl, 2
xor byte [rax + r13 + 0xa], cl
inc dword [r13]
jmp 0x180006bc0
cmp r8d, ecx
je 0x180006c30
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x180006c17
movsxd rax, edx
add cl, 3
xor byte [rax + r13 + 0xa], cl
inc dword [r13]
jmp 0x180006bc0
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x180006c3b
movsxd rax, edx
add cl, 4
xor byte [rax + r13 + 0xa], cl
inc dword [r13]
jmp 0x180006bc0
movsxd rcx, edx
lea eax, [rdx + 0x7d]
xor byte [rcx + r13 + 0xa], al
inc edx
cmp edx, 8
jb 0x180006bc0
mov byte [r13 + 9], 1
mov rax, r13
jmp 0x180006dba
mov rcx, qword [rbp - 0x48]
mov eax, dword [rcx]
test al, 1
jne 0x180006d2d
movups xmm0, xmmword [0x18000c678]
mov r14, qword [rbp - 0x38]
or eax, 1
mov rdi, qword [rbp - 0x30]
mov r15, qword [rbp - 0x28]
mov r12, qword [rbp - 0x20]
mov r13, qword [rbp - 0x18]
mov dword [rcx], eax
mov eax, dword [0x18000c688]
mov rcx, qword [rbp - 0x40]
mov qword [rsi], 0
mov word [rsi + 8], 0
mov dword [rsp + 0x40], eax
xor eax, eax
mov qword [rsi + 0xa], rax
xor edx, edx
mov byte [rsi + 0x12], al
mov rsi, qword [rbp - 0x10]
movaps xmmword [rsp + 0x30], xmm0
movzx eax, byte [r14 + rcx - 0xb]
add edx, 9
mov byte [rcx - 1], al
movzx eax, byte [rdi + rcx]
mov byte [rcx], al
movzx eax, byte [r15 + rcx]
mov byte [rcx + 1], al
movzx eax, byte [r12 + rcx]
mov byte [rcx + 2], al
movzx eax, byte [rcx + r13]
mov byte [rcx + 3], al
movzx eax, byte [rsi + rcx]
mov byte [rcx + 4], al
lea rcx, [rcx + 9]
mov rax, qword [rbp - 8]
movzx eax, byte [rax + rcx - 9]
mov byte [rcx - 4], al
mov rax, qword [rbp]
movzx eax, byte [rax + rcx - 9]
mov byte [rcx - 3], al
mov rax, qword [rbp + 8]
movzx eax, byte [rax + rcx - 9]
mov byte [rcx - 2], al
cmp edx, 9
jb 0x180006cb0
mov rsi, qword [rbp + 0x270]
mov r14, qword [rbp + 0x278]
mov r15, qword [rbp + 0x288]
mov r12, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
cmp byte [rsi + 9], 0
jne 0x180006db3
xor edx, edx
nop dword [rax]
mov ecx, dword [rsi + 4]
mov r8d, dword [rsi]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x180006d5b
movsxd rax, edx
inc cl
xor byte [rax + rsi + 0xa], cl
inc dword [rsi]
jmp 0x180006d40
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x180006d71
movsxd rax, edx
add cl, 2
xor byte [rax + rsi + 0xa], cl
inc dword [rsi]
jmp 0x180006d40
cmp r8d, ecx
je 0x180006da2
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x180006d8c
movsxd rax, edx
add cl, 3
xor byte [rax + rsi + 0xa], cl
inc dword [rsi]
jmp 0x180006d40
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x180006dac
movsxd rax, edx
add cl, 4
xor byte [rax + rsi + 0xa], cl
inc dword [rsi]
jmp 0x180006d40
movsxd rcx, edx
lea eax, [rdx + 0x7d]
xor byte [rcx + rsi + 0xa], al
inc edx
cmp edx, 9
jb 0x180006d40
mov byte [rsi + 9], 1
mov rax, rsi
lea rbx, [rax + 0xa]
call fcn.180007c20
mov r10, rax
cmp byte [rax + 9], 0
jne 0x180006e60
xor r8d, r8d
nop dword [rax]
nop word [rax + rax]
mov edx, dword [r10 + 4]
mov r9d, dword [r10]
lea ecx, [rdx + 1]
cmp r9d, ecx
jne 0x180006dfe
movsxd rax, r8d
inc dl
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180006de0
lea eax, [rdx + 2]
cmp r9d, eax
jne 0x180006e16
movsxd rax, r8d
add dl, 2
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180006de0
cmp r9d, edx
je 0x180006e4b
lea eax, [rdx + 4]
cmp r9d, eax
jne 0x180006e33
movsxd rax, r8d
add dl, 3
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180006de0
lea eax, [rdx + 5]
cmp r9d, eax
jne 0x180006e57
movsxd rax, r8d
add dl, 4
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180006de0
movsxd rcx, r8d
lea eax, [r8 + 0x7c]
xor byte [rcx + r10 + 0xa], al
inc r8d
cmp r8d, 0x17
jb 0x180006de0
lea rcx, [r10 + 0xa]
mov byte [r10 + 9], 1
mov rdx, rbx
call fcn.180001010
mov rbx, qword [rsp + 0x68]
mov ecx, 0x28
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180007221
cmp byte [0x18000f93b], 0
sete al
mov byte [0x18000f93b], al
test al, al
je 0x180006fef
mov rcx, qword [rbp + 0x10]
mov eax, dword [rcx]
test al, 1
jne 0x180006f63
movups xmm0, xmmword [0x18000c810]
mov r13, qword [rbp + 0x20]
or eax, 1
mov rsi, qword [rbp + 0x28]
mov r12, qword [rbp + 0x30]
mov r15, qword [rbp + 0x38]
mov rdi, qword [rbp + 0x40]
mov r14, qword [rbp + 0x48]
mov dword [rcx], eax
mov eax, dword [0x18000c820]
mov rcx, qword [rbp + 0x18]
mov qword [rbx], 0
mov word [rbx + 8], 0
mov dword [rsp + 0x40], eax
xor eax, eax
mov qword [rbx + 0xa], rax
xor edx, edx
mov rbx, qword [rbp + 0x50]
movaps xmmword [rsp + 0x30], xmm0
nop
movzx eax, byte [rcx + r13 - 0xb]
add edx, 8
mov byte [rcx - 1], al
movzx eax, byte [rsi + rcx]
mov byte [rcx], al
movzx eax, byte [r12 + rcx]
mov byte [rcx + 1], al
movzx eax, byte [r15 + rcx]
mov byte [rcx + 2], al
movzx eax, byte [rdi + rcx]
mov byte [rcx + 3], al
movzx eax, byte [r14 + rcx]
mov byte [rcx + 4], al
movzx eax, byte [rbx + rcx]
mov byte [rcx + 5], al
lea rcx, [rcx + 8]
mov rax, qword [rbp + 0x58]
movzx eax, byte [rax + rcx - 8]
mov byte [rcx - 2], al
cmp edx, 8
jb 0x180006f00
mov r15, qword [rbp + 0x288]
mov r12, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x58]
cmp byte [rbx + 9], 0
jne 0x180006fe3
xor edx, edx
nop dword [rax + rax]
mov ecx, dword [rbx + 4]
mov r8d, dword [rbx]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x180006f8b
movsxd rax, edx
inc cl
xor byte [rax + rbx + 0xa], cl
inc dword [rbx]
jmp 0x180006f70
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x180006fa1
movsxd rax, edx
add cl, 2
xor byte [rax + rbx + 0xa], cl
inc dword [rbx]
jmp 0x180006f70
cmp r8d, ecx
je 0x180006fd2
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x180006fbc
movsxd rax, edx
add cl, 3
xor byte [rax + rbx + 0xa], cl
inc dword [rbx]
jmp 0x180006f70
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x180006fdc
movsxd rax, edx
add cl, 4
xor byte [rax + rbx + 0xa], cl
inc dword [rbx]
jmp 0x180006f70
movsxd rcx, edx
lea eax, [rdx + 0x7e]
xor byte [rcx + rbx + 0xa], al
inc edx
cmp edx, 8
jb 0x180006f70
mov byte [rbx + 9], 1
mov rax, rbx
jmp 0x180007175
mov rcx, qword [rbp + 0x60]
mov eax, dword [rcx]
test al, 1
jne 0x1800070df
movups xmm0, xmmword [0x18000c660]
mov rdi, qword [rbp + 0x70]
or eax, 1
mov r13, qword [rbp + 0x78]
mov rsi, qword [rbp + 0x80]
mov r15, qword [rbp + 0x88]
mov r12, qword [rbp + 0x90]
mov dword [rcx], eax
mov eax, dword [0x18000c670]
mov rcx, qword [rbp + 0x68]
mov qword [r14], 0
mov word [r14 + 8], 0
mov dword [rsp + 0x40], eax
xor eax, eax
mov qword [r14 + 0xa], rax
xor edx, edx
mov byte [r14 + 0x12], al
mov r14, qword [rbp + 0x98]
movaps xmmword [rsp + 0x30], xmm0
nop word [rax + rax]
movzx eax, byte [rdi + rcx - 0xb]
add edx, 9
mov byte [rcx - 1], al
movzx eax, byte [rcx + r13]
mov byte [rcx], al
movzx eax, byte [rsi + rcx]
mov byte [rcx + 1], al
movzx eax, byte [r15 + rcx]
mov byte [rcx + 2], al
movzx eax, byte [r12 + rcx]
mov byte [rcx + 3], al
movzx eax, byte [r14 + rcx]
mov byte [rcx + 4], al
lea rcx, [rcx + 9]
mov rax, qword [rbp + 0xa0]
movzx eax, byte [rax + rcx - 9]
mov byte [rcx - 4], al
mov rax, qword [rbp + 0xa8]
movzx eax, byte [rax + rcx - 9]
mov byte [rcx - 3], al
mov rax, qword [rbp + 0xb0]
movzx eax, byte [rax + rcx - 9]
mov byte [rcx - 2], al
cmp edx, 9
jb 0x180007060
mov r14, qword [rbp + 0x278]
mov r15, qword [rbp + 0x288]
mov r12, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
cmp byte [r14 + 9], 0
jne 0x18000716d
xor edx, edx
nop dword [rax]
mov ecx, dword [r14 + 4]
mov r8d, dword [r14]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x18000710e
movsxd rax, edx
inc cl
xor byte [rax + r14 + 0xa], cl
inc dword [r14]
jmp 0x1800070f0
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x180007126
movsxd rax, edx
add cl, 2
xor byte [rax + r14 + 0xa], cl
inc dword [r14]
jmp 0x1800070f0
cmp r8d, ecx
je 0x18000715b
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x180007143
movsxd rax, edx
add cl, 3
xor byte [rax + r14 + 0xa], cl
inc dword [r14]
jmp 0x1800070f0
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x180007166
movsxd rax, edx
add cl, 4
xor byte [rax + r14 + 0xa], cl
inc dword [r14]
jmp 0x1800070f0
movsxd rcx, edx
lea eax, [rdx + 0x7e]
xor byte [rcx + r14 + 0xa], al
inc edx
cmp edx, 9
jb 0x1800070f0
mov byte [r14 + 9], 1
mov rax, r14
lea rbx, [rax + 0xa]
call fcn.180007f50
mov r10, rax
cmp byte [rax + 9], 0
jne 0x180007210
xor r8d, r8d
nop
mov edx, dword [r10 + 4]
mov r9d, dword [r10]
lea ecx, [rdx + 1]
cmp r9d, ecx
jne 0x1800071ae
movsxd rax, r8d
inc dl
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007190
lea eax, [rdx + 2]
cmp r9d, eax
jne 0x1800071c6
movsxd rax, r8d
add dl, 2
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007190
cmp r9d, edx
je 0x1800071fb
lea eax, [rdx + 4]
cmp r9d, eax
jne 0x1800071e3
movsxd rax, r8d
add dl, 3
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007190
lea eax, [rdx + 5]
cmp r9d, eax
jne 0x180007207
movsxd rax, r8d
add dl, 4
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007190
movsxd rcx, r8d
lea eax, [r8 + 0x7e]
xor byte [rcx + r10 + 0xa], al
inc r8d
cmp r8d, 0x1a
jb 0x180007190
lea rcx, [r10 + 0xa]
mov byte [r10 + 9], 1
mov rdx, rbx
call fcn.180001010
mov ecx, 0x25
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800075e1
cmp byte [0x18000f939], 0
sete al
mov byte [0x18000f939], al
test al, al
je 0x1800073b0
mov rcx, qword [rbp + 0xb8]
mov eax, dword [rcx]
test al, 1
jne 0x180007329
movups xmm0, xmmword [0x18000c4e0]
mov r13, qword [rbp + 0xc8]
or eax, 1
mov rsi, qword [rbp + 0xd0]
mov r14, qword [rbp + 0xd8]
mov r12, qword [rbp + 0xe0]
mov r15, qword [rbp + 0xe8]
mov dword [rcx], eax
mov eax, dword [0x18000c4f0]
mov rcx, qword [rbp + 0xc0]
mov qword [rdi], 0
mov word [rdi + 8], 0
mov dword [rsp + 0x40], eax
xor eax, eax
mov qword [rdi + 0xa], rax
xor edx, edx
mov rdi, qword [rbp + 0xf0]
movaps xmmword [rsp + 0x30], xmm0
nop
movzx eax, byte [rcx + r13 - 0xb]
add edx, 8
mov byte [rcx - 1], al
movzx eax, byte [rsi + rcx]
mov byte [rcx], al
movzx eax, byte [r14 + rcx]
mov byte [rcx + 1], al
movzx eax, byte [r12 + rcx]
mov byte [rcx + 2], al
movzx eax, byte [r15 + rcx]
mov byte [rcx + 3], al
movzx eax, byte [rdi + rcx]
mov byte [rcx + 4], al
lea rcx, [rcx + 8]
mov rax, qword [rbp + 0xf8]
movzx eax, byte [rax + rcx - 8]
mov byte [rcx - 3], al
mov rax, qword [rbp + 0x100]
movzx eax, byte [rax + rcx - 8]
mov byte [rcx - 2], al
cmp edx, 8
jb 0x1800072c0
mov r15, qword [rbp + 0x288]
mov r12, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
cmp byte [rdi + 9], 0
jne 0x1800073a4
xor edx, edx
mov ecx, dword [rdi + 4]
mov r8d, dword [rdi]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x18000734c
movsxd rax, edx
inc cl
xor byte [rax + rdi + 0xa], cl
inc dword [rdi]
jmp 0x180007331
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x180007362
movsxd rax, edx
add cl, 2
xor byte [rax + rdi + 0xa], cl
inc dword [rdi]
jmp 0x180007331
cmp r8d, ecx
je 0x180007393
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x18000737d
movsxd rax, edx
add cl, 3
xor byte [rax + rdi + 0xa], cl
inc dword [rdi]
jmp 0x180007331
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x18000739d
movsxd rax, edx
add cl, 4
xor byte [rax + rdi + 0xa], cl
inc dword [rdi]
jmp 0x180007331
movsxd rcx, edx
lea eax, [rdx + 0x7f]
xor byte [rcx + rdi + 0xa], al
inc edx
cmp edx, 8
jb 0x180007331
mov byte [rdi + 9], 1
mov rax, rdi
jmp 0x180007535
mov rcx, qword [rbp + 0x108]
mov eax, dword [rcx]
test al, 1
jne 0x18000749b
movups xmm0, xmmword [0x18000c4c8]
mov r13, qword [rbp + 0x118]
or eax, 1
mov rsi, qword [rbp + 0x120]
mov r14, qword [rbp + 0x128]
mov r12, qword [rbp + 0x130]
mov dword [rcx], eax
mov eax, dword [0x18000c4d8]
mov rcx, qword [rbp + 0x110]
mov qword [r15], 0
mov word [r15 + 8], 0
mov dword [rsp + 0x40], eax
xor eax, eax
mov qword [r15 + 0xa], rax
xor edx, edx
mov byte [r15 + 0x12], al
mov r15, qword [rbp + 0x138]
movaps xmmword [rsp + 0x30], xmm0
movzx eax, byte [rcx + r13 - 0xb]
add edx, 9
mov byte [rcx - 1], al
movzx eax, byte [rsi + rcx]
mov byte [rcx], al
movzx eax, byte [r14 + rcx]
mov byte [rcx + 1], al
movzx eax, byte [r12 + rcx]
mov byte [rcx + 2], al
movzx eax, byte [r15 + rcx]
mov byte [rcx + 3], al
lea rcx, [rcx + 9]
mov rax, qword [rbp + 0x140]
movzx eax, byte [rax + rcx - 9]
mov byte [rcx - 5], al
mov rax, qword [rbp + 0x148]
movzx eax, byte [rax + rcx - 9]
mov byte [rcx - 4], al
mov rax, qword [rbp + 0x150]
movzx eax, byte [rax + rcx - 9]
mov byte [rcx - 3], al
mov rax, qword [rbp + 0x158]
movzx eax, byte [rax + rcx - 9]
mov byte [rcx - 2], al
cmp edx, 9
jb 0x180007420
mov r15, qword [rbp + 0x288]
mov r12, qword [rsp + 0x50]
cmp byte [r15 + 9], 0
jne 0x18000752d
xor edx, edx
nop dword [rax + rax]
mov ecx, dword [r15 + 4]
mov r8d, dword [r15]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x1800074ce
movsxd rax, edx
inc cl
xor byte [rax + r15 + 0xa], cl
inc dword [r15]
jmp 0x1800074b0
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x1800074e6
movsxd rax, edx
add cl, 2
xor byte [rax + r15 + 0xa], cl
inc dword [r15]
jmp 0x1800074b0
cmp r8d, ecx
je 0x18000751b
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x180007503
movsxd rax, edx
add cl, 3
xor byte [rax + r15 + 0xa], cl
inc dword [r15]
jmp 0x1800074b0
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x180007526
movsxd rax, edx
add cl, 4
xor byte [rax + r15 + 0xa], cl
inc dword [r15]
jmp 0x1800074b0
movsxd rcx, edx
lea eax, [rdx - 0x80]
xor byte [rcx + r15 + 0xa], al
inc edx
cmp edx, 9
jb 0x1800074b0
mov byte [r15 + 9], 1
mov rax, r15
lea rbx, [rax + 0xa]
call fcn.1800082c0
mov r10, rax
cmp byte [rax + 9], 0
jne 0x1800075d0
xor r8d, r8d
nop
mov edx, dword [r10 + 4]
mov r9d, dword [r10]
lea ecx, [rdx + 1]
cmp r9d, ecx
jne 0x18000756e
movsxd rax, r8d
inc dl
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007550
lea eax, [rdx + 2]
cmp r9d, eax
jne 0x180007586
movsxd rax, r8d
add dl, 2
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007550
cmp r9d, edx
je 0x1800075bb
lea eax, [rdx + 4]
cmp r9d, eax
jne 0x1800075a3
movsxd rax, r8d
add dl, 3
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007550
lea eax, [rdx + 5]
cmp r9d, eax
jne 0x1800075c7
movsxd rax, r8d
add dl, 4
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007550
movsxd rcx, r8d
lea eax, [r8 + 0x7f]
xor byte [rcx + r10 + 0xa], al
inc r8d
cmp r8d, 0x18
jb 0x180007550
lea rcx, [r10 + 0xa]
mov byte [r10 + 9], 1
mov rdx, rbx
call fcn.180001010
mov ecx, 0x27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800079e1
cmp byte [0x18000f93a], 0
sete al
mov byte [0x18000f93a], al
test al, al
je 0x18000779a
mov rcx, qword [rbp + 0x1b8]
mov r9, qword [rsp + 0x60]
mov eax, dword [rcx]
test al, 1
jne 0x1800076fa
movups xmm0, xmmword [0x18000c710]
mov r13, qword [rbp + 0x170]
or eax, 1
mov rsi, qword [rbp + 0x178]
mov r14, qword [rbp + 0x180]
mov r15, qword [rbp + 0x188]
mov r12, qword [rbp + 0x190]
mov dword [rcx], eax
mov eax, dword [0x18000c720]
mov rcx, qword [rbp + 0x168]
mov qword [r9], 0
mov word [r9 + 8], 0
mov dword [rsp + 0x40], eax
xor eax, eax
mov qword [r9 + 0xa], rax
xor edx, edx
mov r9, qword [rbp + 0x198]
movaps xmmword [rsp + 0x30], xmm0
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + r13 - 0xb]
add edx, 8
mov byte [rcx - 1], al
movzx eax, byte [rsi + rcx]
mov byte [rcx], al
movzx eax, byte [r14 + rcx]
mov byte [rcx + 1], al
movzx eax, byte [rcx + r15]
mov byte [rcx + 2], al
movzx eax, byte [rcx + r12]
mov byte [rcx + 3], al
movzx eax, byte [rcx + r9]
mov byte [rcx + 4], al
lea rcx, [rcx + 8]
mov rax, qword [rbp + 0x1a0]
movzx eax, byte [rcx + rax - 8]
mov byte [rcx - 3], al
mov rax, qword [rbp + 0x1a8]
movzx eax, byte [rcx + rax - 8]
mov byte [rcx - 2], al
cmp edx, 8
jb 0x180007690
mov r15, qword [rbp + 0x288]
mov r12, qword [rsp + 0x50]
mov r9, qword [rsp + 0x60]
cmp byte [r9 + 9], 0
jne 0x18000778d
xor edx, edx
nop word [rax + rax]
mov ecx, dword [r9 + 4]
mov r8d, dword [r9]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x18000772e
movsxd rax, edx
inc cl
xor byte [rax + r9 + 0xa], cl
inc dword [r9]
jmp 0x180007710
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x180007746
movsxd rax, edx
add cl, 2
xor byte [rax + r9 + 0xa], cl
inc dword [r9]
jmp 0x180007710
cmp r8d, ecx
je 0x18000777b
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x180007763
movsxd rax, edx
add cl, 3
xor byte [rax + r9 + 0xa], cl
inc dword [r9]
jmp 0x180007710
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x180007786
movsxd rax, edx
add cl, 4
xor byte [rax + r9 + 0xa], cl
inc dword [r9]
jmp 0x180007710
movsxd rcx, edx
lea eax, [rdx - 0x80]
xor byte [rcx + r9 + 0xa], al
inc edx
cmp edx, 8
jb 0x180007710
mov byte [r9 + 9], 1
mov rax, r9
jmp 0x180007930
mov rcx, qword [rbp + 0x1b0]
mov eax, dword [rcx]
test al, 1
jne 0x18000788b
movups xmm0, xmmword [0x18000c648]
mov r13, qword [rbp + 0x1c0]
or eax, 1
mov rsi, qword [rbp + 0x1c8]
mov r14, qword [rbp + 0x1d0]
mov r15, qword [rbp + 0x1d8]
mov dword [rcx], eax
mov eax, dword [0x18000c658]
mov qword [r12], 0
mov word [r12 + 8], 0
mov dword [rsp + 0x40], eax
xor eax, eax
mov qword [r12 + 0xa], rax
xor edx, edx
mov byte [r12 + 0x12], al
mov rax, qword [rbp + 0x210]
mov r12, qword [rbp + 0x1e0]
movaps xmmword [rsp + 0x30], xmm0
nop
movzx ecx, byte [rax + r13 - 0xb]
add edx, 9
mov byte [rax - 1], cl
movzx ecx, byte [rax + rsi]
mov byte [rax], cl
movzx ecx, byte [rax + r14]
mov byte [rax + 1], cl
movzx ecx, byte [rax + r15]
mov byte [rax + 2], cl
movzx ecx, byte [rax + r12]
mov byte [rax + 3], cl
lea rax, [rax + 9]
mov rcx, qword [rbp + 0x1e8]
movzx ecx, byte [rax + rcx - 9]
mov byte [rax - 5], cl
mov rcx, qword [rbp + 0x1f0]
movzx ecx, byte [rax + rcx - 9]
mov byte [rax - 4], cl
mov rcx, qword [rbp + 0x1f8]
movzx ecx, byte [rax + rcx - 9]
mov byte [rax - 3], cl
mov rcx, qword [rbp + 0x200]
movzx ecx, byte [rax + rcx - 9]
mov byte [rax - 2], cl
cmp edx, 9
jb 0x180007810
mov r15, qword [rbp + 0x288]
mov r12, qword [rsp + 0x50]
cmp byte [r12 + 9], 0
jne 0x180007927
xor edx, edx
nop dword [rax]
mov ecx, dword [r12 + 4]
mov r8d, dword [r12]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x1800078c1
movsxd rax, edx
inc cl
xor byte [rax + r12 + 0xa], cl
inc dword [r12]
jmp 0x1800078a0
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x1800078da
movsxd rax, edx
add cl, 2
xor byte [rax + r12 + 0xa], cl
inc dword [r12]
jmp 0x1800078a0
cmp r8d, ecx
je 0x180007911
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x1800078f8
movsxd rax, edx
add cl, 3
xor byte [rax + r12 + 0xa], cl
inc dword [r12]
jmp 0x1800078a0
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x18000791c
movsxd rax, edx
add cl, 4
xor byte [rax + r12 + 0xa], cl
inc dword [r12]
jmp 0x1800078a0
movsxd rcx, edx
lea eax, [rdx - 0x7f]
xor byte [rcx + r12 + 0xa], al
inc edx
cmp edx, 9
jb 0x1800078a0
mov byte [r12 + 9], 1
mov rax, r12
lea rbx, [rax + 0xa]
call fcn.1800085f0
mov r10, rax
cmp byte [rax + 9], 0
jne 0x1800079d0
xor r8d, r8d
nop dword [rax]
mov edx, dword [r10 + 4]
mov r9d, dword [r10]
lea ecx, [rdx + 1]
cmp r9d, ecx
jne 0x18000796e
movsxd rax, r8d
inc dl
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007950
lea eax, [rdx + 2]
cmp r9d, eax
jne 0x180007986
movsxd rax, r8d
add dl, 2
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007950
cmp r9d, edx
je 0x1800079bb
lea eax, [rdx + 4]
cmp r9d, eax
jne 0x1800079a3
movsxd rax, r8d
add dl, 3
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007950
lea eax, [rdx + 5]
cmp r9d, eax
jne 0x1800079c7
movsxd rax, r8d
add dl, 4
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007950
movsxd rcx, r8d
lea eax, [r8 - 0x80]
xor byte [rcx + r10 + 0xa], al
inc r8d
cmp r8d, 0x1f
jb 0x180007950
lea rcx, [r10 + 0xa]
mov byte [r10 + 9], 1
mov rdx, rbx
call fcn.180001010
mov ecx, 0x27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180007abc
call fcn.180008a10
mov r10, rax
cmp byte [rax + 9], 0
jne 0x180007a90
xor r8d, r8d
nop dword [rax]
mov edx, dword [r10 + 4]
mov r9d, dword [r10]
lea ecx, [rdx + 1]
cmp r9d, ecx
jne 0x180007a2e
movsxd rax, r8d
inc dl
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007a10
lea eax, [rdx + 2]
cmp r9d, eax
jne 0x180007a46
movsxd rax, r8d
add dl, 2
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007a10
cmp r9d, edx
je 0x180007a7b
lea eax, [rdx + 4]
cmp r9d, eax
jne 0x180007a63
movsxd rax, r8d
add dl, 3
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007a10
lea eax, [rdx + 5]
cmp r9d, eax
jne 0x180007a87
movsxd rax, r8d
add dl, 4
xor byte [rax + r10 + 0xa], dl
inc dword [r10]
jmp 0x180007a10
movsxd rcx, r8d
lea eax, [r8 - 0x7f]
xor byte [rcx + r10 + 0xa], al
inc r8d
cmp r8d, 0x18
jb 0x180007a10
lea r8, [r10 + 0xa]
mov dword [rsp + 0x28], 1
xor r9d, r9d
mov qword [rsp + 0x20], 0
lea rdx, str.open
mov byte [r10 + 9], 1
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rcx, [rbp + 0x208]
call fcn.180001230
mov rax, qword [rbp + 0x208]
movabs rcx, 0x7ffffffffd050f7f
lea rdi, [rax + 0x2faf080]
cmp rax, rcx
jl 0x180007aef
movabs rdi, 0x7fffffffffffffff
movabs rsi, 0x4e94914f0000
movabs r13, 0xb2f4fc0794908cf3
movabs r14, 0x431bde82d7b634db
nop dword [rax]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov rcx, rax
cmp rbx, 0x989680
jne 0x180007b31
imul rax, rcx, 0x64
jmp 0x180007ba2
cmp rbx, 0x16e3600
jne 0x180007b84
mov rax, r13
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
mov rax, r13
imul rcx, rcx, 0x3b9aca00
imul rcx
lea rax, [rcx + rdx]
sar rax, 0x18
mov rcx, rax
shr rcx, 0x3f
add rax, rcx
imul rcx, r8, 0x3b9aca00
jmp 0x180007b9f
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rcx, rcx, 0x3b9aca00
add rax, rcx
cmp rax, rdi
jge 0x180007bf0
mov rcx, rdi
sub rcx, rax
cmp rcx, rsi
jl 0x180007bc1
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x180007b10
mov rax, r14
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x180007be4
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x180007b10
mov rsi, qword [rbp + 0x270]
mov r14, qword [rbp + 0x278]
mov r13, qword [rbp + 0x280]
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x58]
jmp 0x180006ab0