Function at 0x180003e8c
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2a8]
sub rsp, 0x380
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x18003b3b0]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov rdi, qword [0x18003c560]
mov rcx, rdi
call fcn.180001630
xor r12d, r12d
test al, al
je 0x180004ac7
mov rcx, qword [0x18003c528]
call fcn.180001630
test al, al
je 0x180004ac7
mov rdx, qword [0x18003c478]
mov rcx, rdx
call fcn.180001630
test al, al
je 0x180004ac7
mov rcx, qword [0x18003c550]
call fcn.180001630
test al, al
je 0x180004ac7
mov rcx, qword [rdx + 0x290]
mov rcx, qword [rcx + 0x4dc]
call fcn.180001630
test al, al
je 0x180004ac7
cmp byte [0x18003c4b3], r12b
mov rdi, qword [rdi + 0x5b4]
je 0x180003fbe
movsxd rcx, dword [0x18003c4d8]
lea rax, [0x180032498]
mov ecx, dword [rax + rcx*4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180003fbe
mov rcx, qword [0x18003c520]
mov byte [rsp + 0x50], 1
test rcx, rcx
je 0x180003fc3
call fcn.180001630
test al, al
je 0x180003fc3
jmp 0x180003fd1
mov byte [rsp + 0x50], r12b
mov qword [0x18003c520], r12
mov byte [0x18003c476], r12b
movss xmm0, dword [0x18003648c]
mov rcx, rdi
movss dword [rbp - 0x78], xmm0
call fcn.180001630
test al, al
je 0x180004aab
movss xmm12, dword [0x18003638c]
xorps xmm14, xmm14
lea rax, [rdi + 0x2ac]
mov rcx, rdi
mov rsi, qword [rax]
mov qword [rbp + 8], rax
call fcn.180001630
test al, al
je 0x180004a98
mov rcx, qword [rdi + 0x440]
call fcn.180001630
test al, al
je 0x180004a98
test rcx, rcx
je 0x180004a98
mov r8, qword [rcx + 0x4dc]
mov rcx, r8
call fcn.180001630
test al, al
je 0x180004a98
test r8, r8
je 0x180004a98
mov rdx, qword [0x18003c478]
mov rax, qword [rdx + 0x290]
mov rcx, qword [rax + 0x4dc]
mov eax, dword [rcx + 0x298]
cmp dword [r8 + 0x298], eax
je 0x180004a98
cmp rdi, qword [0x18003c528]
je 0x180004a98
lea rbx, [rdi + 0x3c4]
mov eax, dword [rbx]
dec eax
cmp eax, 0x270f
ja 0x180004a98
mov rcx, qword [rdi + 0x48c]
lea r9, [rbp + 0x10]
movsd xmm9, qword [rdx + 0x8c]
mov r15d, dword [rdx + 0x94]
lea rdx, [rbp - 0x80]
mov r13d, dword [rdi + 0x88]
movups xmm10, xmmword [rcx + 0xa0]
mov eax, dword [rcx + 0xb8]
movsd xmm0, qword [rcx + 0xb0]
mov r8, qword [0x18003c560]
movaps xmm11, xmm10
and dword [rbp - 0x7c], 0
movaps xmm13, xmm10
and dword [rbp - 0x80], 0
movaps xmm15, xmm10
and dword [rbp - 0x54], 0
and dword [rbp - 0x58], 0
and dword [rbp - 0x5c], 0
and dword [rbp - 0x60], 0
movsd qword [rbp + 0x178], xmm0
movaps xmm0, xmm10
shufps xmm0, xmm10, 0xff
shufps xmm11, xmm10, 0x55
subss xmm15, xmm0
movaps xmm1, xmm11
shufps xmm13, xmm10, 0xaa
subss xmm1, dword [rbp + 0x178]
addss xmm11, dword [rbp + 0x178]
addss xmm10, xmm0
mov dword [rbp + 0x180], eax
movsd xmm0, qword [rdi + 0x80]
mov rax, qword [0x18003c550]
movss dword [rbp - 0x68], xmm1
movaps xmm1, xmm13
subss xmm1, dword [rbp + 0x17c]
addss xmm13, dword [rbp + 0x17c]
movsd xmm8, qword [rax + 0x494]
mov r14d, dword [rax + 0x49c]
movsd qword [rbp + 0x168], xmm0
movss dword [rsp + 0x58], xmm1
movss xmm1, dword [r8 + 0x4ec]
lea r8, [rbp + 0x20]
subss xmm1, dword [0x18003636c]
movsd qword [rbp + 0x50], xmm0
movsd qword [rbp + 0x120], xmm0
movss xmm0, dword [rcx + 0x244]
lea rcx, [rbp + 0x30]
mov dword [rbp - 0x64], r13d
comiss xmm0, xmm1
mov dword [rbp + 0x18], r14d
mov dword [rbp + 0x28], r15d
mov dword [rbp + 0x38], r13d
movsd xmm0, qword [rdi + 0x80]
movsd qword [rbp + 0x40], xmm8
seta r12b
movsd qword [rbp + 0x10], xmm8
movsd qword [rbp + 0x20], xmm9
movsd qword [rbp + 0x30], xmm0
call fcn.180003804
movss xmm3, dword [rbp + 0x40]
movss xmm0, dword [rbp + 0x44]
subss xmm0, dword [rbp + 0x54]
subss xmm3, dword [rbp + 0x50]
movd xmm2, r14d
movd xmm1, r13d
subss xmm2, xmm1
mov byte [rsp + 0x51], al
mulss xmm0, xmm0
mulss xmm3, xmm3
mulss xmm2, xmm2
addss xmm0, xmm3
addss xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
divss xmm0, dword [0x18003644c]
movss xmm6, dword [0x180036474]
subss xmm6, xmm0
comiss xmm14, xmm6
jbe 0x180004255
movaps xmm6, xmm14
movss xmm1, dword [0x18003c498]
lea rcx, [rbp - 0x50]
movss xmm2, dword [0x18003c470]
movss xmm7, dword [0x180036474]
divss xmm6, dword [0x180036478]
minss xmm7, xmm0
mulss xmm1, xmm12
movss xmm0, dword [rbp - 0x80]
mulss xmm2, xmm12
divss xmm7, dword [0x180036478]
subss xmm0, xmm1
movss dword [rbp - 0x50], xmm0
movss xmm0, dword [rbp - 0x7c]
subss xmm0, xmm2
movss dword [rbp - 0x4c], xmm0
call fcn.180003708
test r12b, r12b
je 0x1800042bb
movaps xmm0, xmm14
jmp 0x1800042c2
movaps xmm0, xmm6
movaps xmm6, xmm14
cmp qword [0x18003c520], rdi
movss dword [rsp + 0x70], xmm0
sete al
movss dword [rsp + 0x74], xmm7
ucomiss xmm0, xmm14
mov dword [rsp + 0x7c], 0x3f800000
movss dword [rsp + 0x78], xmm6
jp 0x1800042ee
je 0x1800042fa
movups xmm0, xmmword [0x18003b540]
movups xmmword [rsp + 0x70], xmm0
ucomiss xmm6, xmm14
jp 0x180004302
je 0x18000430e
movups xmm0, xmmword [0x18003b5a0]
movups xmmword [rsp + 0x70], xmm0
xor r12d, r12d
test al, al
je 0x180004321
movups xmm0, xmmword [0x18003b560]
movups xmmword [rsp + 0x70], xmm0
movss xmm1, dword [rbp - 0x68]
lea r9, [rbp + 0x60]
movaps xmm0, xmm15
movsd qword [rbp + 0x60], xmm8
unpcklps xmm0, xmm1
lea r8, [rbp + 0x70]
movss xmm1, dword [rsp + 0x58]
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x80]
movss dword [rbp + 0x88], xmm1
mov dword [rbp + 0x68], r14d
movsd qword [rbp + 0x70], xmm9
mov dword [rbp + 0x78], r15d
movsd qword [rbp + 0x80], xmm0
call fcn.180003804
test al, al
je 0x180004a98
movaps xmm0, xmm10
movss dword [rbp + 0xb8], xmm13
unpcklps xmm0, xmm11
lea r9, [rbp + 0x90]
lea r8, [rbp + 0xa0]
movsd qword [rbp + 0xb0], xmm0
lea rdx, [rbp - 0x60]
movsd qword [rbp + 0x90], xmm8
lea rcx, [rbp + 0xb0]
mov dword [rbp + 0x98], r14d
movsd qword [rbp + 0xa0], xmm9
mov dword [rbp + 0xa8], r15d
call fcn.180003804
test al, al
je 0x180004a98
movsd xmm0, qword [rbp + 0x168]
lea r9, [rbp + 0xc0]
lea r8, [rbp + 0xd0]
movsd qword [rbp + 0xe0], xmm0
lea rdx, [rbp - 0x80]
movsd qword [rbp + 0xc0], xmm8
lea rcx, [rbp + 0xe0]
mov dword [rbp + 0xc8], r14d
movsd qword [rbp + 0xd0], xmm9
mov dword [rbp + 0xd8], r15d
mov dword [rbp + 0xe8], r13d
call fcn.180003804
test al, al
je 0x180004a98
mov rax, qword [rdi + 0x48c]
movss xmm13, dword [rbp - 0x5c]
movss xmm15, dword [rbp - 0x54]
movaps xmm9, xmm13
mov rcx, qword [0x18003c560]
subss xmm9, xmm15
movss xmm1, dword [rcx + 0x4ec]
subss xmm1, dword [0x18003636c]
movaps xmm10, xmm9
andps xmm9, xmmword [0x180036690]
mulss xmm10, dword [0x180036380]
cvtps2pd xmm0, xmm9
andps xmm10, xmmword [0x180036690]
mulsd xmm0, qword [0x1800363d8]
cvtpd2ps xmm6, xmm0
movss xmm0, dword [rax + 0x244]
mov rax, qword [rdi + 0x440]
comiss xmm0, xmm1
movss dword [rsp + 0x58], xmm6
seta r15b
cmp qword [rax + 0x290], r12
je 0x180004654
mov r14d, dword [rbx]
mov edx, 8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
cmp byte [0x18003c509], r12b
lea rcx, [rbp + 0x168]
mov rax, qword [rdi + 0x440]
movups xmm0, xmmword [rax + 0x290]
movdqu xmmword [rbp + 0x168], xmm0
je 0x1800045b0
lea rdx, [rbp + 0x128]
call fcn.1800013a8
mov r9, rax
cmp qword [rax + 0x18], 0x10
jb 0x180004510
mov r9, qword [rax]
mov dword [rsp + 0x60], 0xd7edaddc
mov rcx, r12
mov dword [rsp + 0x64], 0xfea9ab
mov byte [rsp + 0x68], 1
lea eax, [rcx - 0x79]
xor byte [rsp + rcx + 0x60], al
inc rcx
cmp rcx, 7
jb 0x180004528
mov r8d, r14d
mov byte [rsp + 0x68], r12b
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x190]
call fcn.180005898
mov rdx, qword [rbp + 0x140]
cmp rdx, 0x10
jb 0x180004592
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000458d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004b2f
call fcn.18002e1dc
mov qword [rbp + 0x138], r12
mov qword [rbp + 0x140], 0xf
mov byte [rbp + 0x128], r12b
jmp 0x180004654
lea rdx, [rbp + 0x148]
call fcn.1800013a8
mov r8, rax
cmp qword [rax + 0x18], 0x10
jb 0x1800045c9
mov r8, qword [rax]
mov dword [rsp + 0x54], 0x100fba2
mov rcx, r12
lea eax, [rcx - 0x79]
xor byte [rsp + rcx + 0x54], al
inc rcx
cmp rcx, 2
jb 0x1800045d4
lea rdx, [rsp + 0x54]
mov byte [rsp + 0x57], r12b
lea rcx, [rbp + 0x190]
call fcn.180005898
mov rdx, qword [rbp + 0x160]
cmp rdx, 0x10
jb 0x18000463b
mov rcx, qword [rbp + 0x148]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004636
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004b36
call fcn.18002e1dc
mov qword [rbp + 0x158], r12
mov qword [rbp + 0x160], 0xf
mov byte [rbp + 0x148], r12b
mov al, byte [0x18003c506]
movss xmm8, dword [rbp - 0x80]
test al, al
je 0x1800046e8
movaps xmm0, xmm10
lea rcx, [0x18003b590]
addss xmm0, xmm8
neg al
sbb eax, eax
and eax, 0xa
subss xmm0, dword [0x180036450]
movss dword [rbp - 0x48], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm13
subss xmm0, dword [0x180036448]
movss dword [rbp - 0x44], xmm0
call fcn.180006fa8
mov rcx, qword [0x18003b530]
lea rdx, [rbp + 0x190]
mov qword [rsp + 0x40], r12
lea r9, [rbp - 0x48]
movss dword [rsp + 0x38], xmm14
add rcx, 0x19c0
mov qword [rsp + 0x30], r12
movaps xmm2, xmm14
mov qword [rsp + 0x28], rdx
xor edx, edx
mov dword [rsp + 0x20], eax
call fcn.180025b10
cmp byte [0x18003c508], r12b
movss xmm11, dword [rbp - 0x7c]
je 0x18000476d
cmp byte [rsp + 0x51], r12b
je 0x18000476d
movss xmm0, dword [0x18003c498]
lea rcx, [0x18003b550]
movss xmm1, dword [0x18003c470]
mulss xmm0, xmm12
mulss xmm1, xmm12
movss dword [rbp - 0x40], xmm0
movaps xmm0, xmm8
unpcklps xmm0, xmm11
movsd qword [rbp + 0x168], xmm0
movss dword [rbp - 0x3c], xmm1
call fcn.180006fa8
mov rcx, qword [0x18003b530]
lea r8, [rbp + 0x168]
movss xmm0, dword [0x1800363c0]
lea rdx, [rbp - 0x40]
add rcx, 0x19c0
movss dword [rsp + 0x20], xmm0
mov r9d, eax
call fcn.180025354
cmp byte [0x18003c507], r12b
je 0x180004914
mov eax, dword [0x18003c4cc]
test eax, eax
jne 0x1800048ba
movaps xmm7, xmm10
movss dword [rbp - 0x34], xmm15
movaps xmm6, xmm8
movss dword [rbp - 0x2c], xmm15
addss xmm7, xmm8
subss xmm6, xmm10
lea rcx, [rsp + 0x70]
movss dword [rbp - 0x38], xmm7
movss dword [rbp - 0x30], xmm6
call fcn.180006fa8
mov rcx, qword [0x18003b530]
lea r8, [rbp - 0x38]
movss xmm0, dword [0x18003c500]
lea rdx, [rbp - 0x30]
add rcx, 0x19c0
movss dword [rsp + 0x20], xmm0
mov r9d, eax
mov ebx, eax
call fcn.180025354
mov rcx, qword [0x18003b530]
lea r8, [rbp - 0x28]
movss xmm0, dword [0x18003c500]
lea rdx, [rbp - 0x20]
add rcx, 0x19c0
movss dword [rbp - 0x28], xmm7
mov r9d, ebx
movss dword [rbp - 0x24], xmm13
movss dword [rbp - 0x20], xmm6
movss dword [rbp - 0x1c], xmm13
movss dword [rsp + 0x20], xmm0
call fcn.180025354
mov rcx, qword [0x18003b530]
lea r8, [rbp - 0x18]
movss xmm0, dword [0x18003c500]
lea rdx, [rbp - 0x10]
add rcx, 0x19c0
movss dword [rbp - 0x18], xmm6
mov r9d, ebx
movss dword [rbp - 0x14], xmm13
movss dword [rbp - 0x10], xmm6
movss dword [rbp - 0xc], xmm15
movss dword [rsp + 0x20], xmm0
call fcn.180025354
mov rcx, qword [0x18003b530]
lea r8, [rbp - 8]
movss xmm0, dword [0x18003c500]
lea rdx, [rbp]
add rcx, 0x19c0
movss dword [rbp - 8], xmm7
mov r9d, ebx
movss dword [rbp - 4], xmm13
movss dword [rbp], xmm7
movss dword [rbp + 4], xmm15
movss dword [rsp + 0x20], xmm0
call fcn.180025354
mov eax, dword [0x18003c4cc]
movss xmm6, dword [rsp + 0x58]
cmp eax, 1
jne 0x180004914
lea rcx, [rsp + 0x70]
call fcn.180006fa8
movaps xmm4, xmm6
mov dword [rsp + 0x58], eax
mulss xmm4, xmm12
lea rax, [rsp + 0x58]
movaps xmm5, xmm9
movaps xmm3, xmm9
mulss xmm5, xmm12
movaps xmm2, xmm6
subss xmm8, xmm4
movss xmm4, dword [0x18003c500]
movss dword [rsp + 0x28], xmm4
subss xmm11, xmm5
mov qword [rsp + 0x20], rax
movaps xmm0, xmm8
movaps xmm1, xmm11
call fcn.180003260
cmp byte [rsp + 0x50], r12b
je 0x180004a98
test r15b, r15b
je 0x180004a98
cmp byte [0x18003c476], r12b
jne 0x180004a98
mov rax, qword [0x18003c550]
lea r9, [rbp + 0xf0]
and dword [rbp - 0x6c], r12d
lea r8, [rbp + 0x100]
and dword [rbp - 0x70], r12d
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x110]
movsd xmm0, qword [rax + 0x494]
mov eax, dword [rax + 0x49c]
mov dword [rbp + 0xf8], eax
mov rax, qword [0x18003c478]
movsd qword [rbp + 0xf0], xmm0
movsd xmm0, qword [rax + 0x8c]
mov eax, dword [rax + 0x94]
movsd qword [rbp + 0x100], xmm0
movsd xmm0, qword [rbp + 0x120]
mov dword [rbp + 0x108], eax
mov eax, dword [rbp - 0x64]
movsd qword [rbp + 0x110], xmm0
mov dword [rbp + 0x118], eax
call fcn.180003804
test al, al
je 0x180004a98
movss xmm9, dword [0x18003c498]
movss xmm8, dword [0x18003c470]
movss xmm13, dword [0x18003c4f4]
movss xmm11, dword [rbp - 0x70]
movss xmm10, dword [rbp - 0x6c]
mulss xmm9, xmm12
mulss xmm8, xmm12
movaps xmm7, xmm9
movaps xmm1, xmm9
divss xmm7, dword [0x18003c568]
movaps xmm6, xmm8
subss xmm1, xmm11
divss xmm6, dword [0x18003c568]
movaps xmm0, xmm8
mulss xmm7, xmm13
subss xmm0, xmm10
mulss xmm1, xmm1
mulss xmm6, xmm13
mulss xmm0, xmm0
addss xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm1, xmm9
subss xmm1, xmm7
comiss xmm11, xmm1
jb 0x180004a6c
addss xmm7, xmm9
comiss xmm7, xmm11
jb 0x180004a6c
movaps xmm1, xmm8
subss xmm1, xmm6
comiss xmm10, xmm1
jb 0x180004a6c
addss xmm6, xmm8
mov al, 1
comiss xmm6, xmm10
jae 0x180004a6f
mov al, r12b
comiss xmm13, xmm0
ja 0x180004a79
test al, al
je 0x180004a8f
movss xmm1, dword [rbp - 0x78]
comiss xmm1, xmm0
jbe 0x180004a8f
movss dword [rbp - 0x78], xmm0
mov qword [0x18003c520], rdi
mov rdi, qword [rbp + 8]
mov rdi, qword [rdi]
jmp 0x180004a9b
mov rdi, rsi
mov rcx, rdi
call fcn.180001630
test al, al
jne 0x180003ffb
mov rcx, qword [0x18003c520]
call fcn.180001630
test al, al
je 0x180004ac7
mov byte [0x18003c476], 1
call fcn.180003a98
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.18002e180
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3