Function at 0x18000f950
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x1380]
mov eax, 0x1480
call fcn.18004fac0
sub rsp, rax
mov rax, qword [0x180064040]
xor rax, rsp
mov qword [rbp + 0x1370], rax
xor ebx, ebx
mov dword [rbp - 0x30], ebx
cmp byte [0x180065168], bl
je 0x180006a18
cmp byte [0x180065090], bl
jne 0x180006a18
call fcn.18004c870
test al, al
jne 0x180006a18
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov r8d, 0x1c
lea rdx, str.net.minecraft.item.ItemBlock
lea rcx, [rsp + 0x20]
call fcn.180005a60
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x20]
call fcn.18004d160
mov rax, qword [0x180065160]
lea rdx, [rsp + 0x60]
mov rcx, qword [rax + 0x38]
call fcn.18000eb00
nop
mov rbx, qword [0x180065000]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx]
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x180064f80]
call fcn.1800048b0
mov rbx, rax
lea rcx, [rsp + 0x20]
call fcn.180006340
nop
lea rsi, vtable.CItemStack.0
mov qword [rsp + 0x20], rsi
cmp byte [0x180064fe8], 0
jne 0x180006657
call fcn.180005bd0
mov rcx, qword [0x180065010]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x48], rbx
mov edi, 4
lea rcx, [rsp + 0x20]
call fcn.180006480
mov rbx, rax
mov r8, qword [rsp + 0x38]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.1800064a0
mov edx, 0x48
mov rcx, qword [rsp + 0x38]
call fcn.18004eaf0
mov r8, qword [rsp + 0x28]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x28]
call fcn.1800064a0
mov edx, 0x48
mov rcx, qword [rsp + 0x28]
call fcn.18004eaf0
nop
mov r8, qword [rsp + 0x78]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x78]
call fcn.1800064a0
mov edx, 0x48
mov rcx, qword [rsp + 0x78]
call fcn.18004eaf0
mov r8, qword [rsp + 0x68]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x68]
call fcn.1800064a0
mov edx, 0x48
mov rcx, qword [rsp + 0x68]
call fcn.18004eaf0
test rbx, rbx
je 0x180006a18
cmp byte [0x1800640b4], 0
je 0x1800067f5
mov rax, qword [0x180065160]
lea rdx, [rbp - 0x68]
mov rcx, qword [rax + 0x38]
call fcn.18000eb00
nop
mov dword [rbp - 0x30], 5
mov rbx, qword [0x180065000]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx]
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x180064f80]
call fcn.1800048b0
mov rbx, rax
lea rcx, [rsp + 0x20]
call fcn.180006340
nop
mov qword [rsp + 0x20], rsi
cmp byte [0x180064fe8], 0
jne 0x180006790
call fcn.180005bd0
mov rcx, qword [0x180065010]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x48], rbx
mov edi, 0xf
mov dword [rbp - 0x30], edi
mov rbx, qword [0x180065008]
lea rcx, [rsp + 0x20]
call fcn.180006480
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x180064f80]
call fcn.1800048b0
mov rcx, qword [0x180064f80]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x100]
mov r8, qword [rsp + 0x58]
mov rdx, rax
call r9
test al, al
jne 0x1800067f5
mov bl, 1
jmp 0x1800067f7
xor bl, bl
test dil, 2
je 0x18000684f
and edi, 0xfffffffd
mov r8, qword [rsp + 0x38]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.1800064a0
mov edx, 0x48
mov rcx, qword [rsp + 0x38]
call fcn.18004eaf0
mov r8, qword [rsp + 0x28]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x28]
call fcn.1800064a0
mov edx, 0x48
mov rcx, qword [rsp + 0x28]
call fcn.18004eaf0
nop
test dil, 1
je 0x18000689b
mov r8, qword [rbp - 0x50]
mov r8, qword [r8 + 8]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x50]
call fcn.1800064a0
mov edx, 0x48
mov rcx, qword [rbp - 0x50]
call fcn.18004eaf0
mov r8, qword [rbp - 0x60]
mov r8, qword [r8 + 8]
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x60]
call fcn.1800064a0
mov edx, 0x48
mov rcx, qword [rbp - 0x60]
call fcn.18004eaf0
test bl, bl
jne 0x180006a18
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0x346dc5d63886594b
imul rcx
mov rbx, rdx
sar rbx, 0xb
mov rax, rbx
shr rax, 0x3f
add rbx, rax
mov eax, dword [0x180065098]
test eax, eax
jne 0x1800068dc
mov eax, ebx
mov dword [0x180065098], ebx
mov ecx, ebx
sub ecx, eax
mov eax, 0x3e8
cdq
idiv dword [0x1800640c0]
cmp ecx, eax
jl 0x180006a18
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006a18
lea rcx, [rbp - 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
movzx r9d, word [rbp - 0x2c]
shl r9d, 0x10
movzx eax, word [rbp - 0x30]
or r9, rax
mov edx, 0x204
mov r8d, 2
mov rcx, qword [0x180065170]
call qword [sym.imp.USER32.dll_SendMessageA]
movzx r9d, word [rbp - 0x2c]
shl r9d, 0x10
movzx eax, word [rbp - 0x30]
or r9, rax
xor r8d, r8d
mov edx, 0x205
mov rcx, qword [0x180065170]
call qword [sym.imp.USER32.dll_SendMessageA]
mov dword [0x180065098], ebx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1364], 0xffffffff
mov dword [rbp - 0x1c], eax
mov edx, 1
nop dword [rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 - 0x1c], eax
inc rdx
cmp rdx, 0x270
jb 0x180006980
mov dword [rbp - 0x20], 0x270
cvttss2si esi, dword [0x1800640bc]
btc esi, 0x1f
cvttss2si eax, dword [0x1800640b8]
btc eax, 0x1f
sub eax, esi
lea rcx, [rbp - 0x20]
cmp eax, 0xffffffff
jne 0x1800069d2
call fcn.180006ce0
mov ecx, eax
jmp 0x180006a0b
lea ebx, [rax + 1]
call fcn.180006ce0
mov edi, ebx
mov ecx, eax
imul rcx, rdi
cmp ecx, ebx
jae 0x180006a07
mov eax, ebx
neg eax
xor edx, edx
div ebx
mov ebx, edx
cmp ecx, edx
jae 0x180006a07
lea rcx, [rbp - 0x20]
call fcn.180006ce0
mov ecx, eax
imul rcx, rdi
cmp ecx, ebx
jb 0x1800069f4
shr rcx, 0x20
lea eax, [rcx + rsi]
btc eax, 0x1f
mov dword [0x1800640c0], eax
mov rcx, qword [rbp + 0x1370]
xor rcx, rsp
call fcn.18004e910
lea r11, [rsp + 0x1480]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
sub rsp, 0x28
mov rax, qword [0x180065160]
mov rcx, qword [rax + 0x38]
mov rax, qword [rcx]
call qword [rax]
test rax, rax
je 0x18000f9a0
mov rax, qword [0x180065160]
mov rcx, qword [rax + 0x40]
mov rax, qword [rcx]
call qword [rax]
test rax, rax
je 0x18000f9a0
call fcn.18000ec10
call fcn.18000b0f0
call fcn.1800088d0
call fcn.180007820
call fcn.180006e70
add rsp, 0x28
jmp 0x180006560
mov byte [0x180065179], 0
add rsp, 0x28
ret