Function at 0x18000777c
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2a8]
sub rsp, 0x380
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x18003e3b0]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov rdi, qword [0x18003f658]
mov rcx, rdi
call fcn.1800046d0
xor r12d, r12d
test al, al
je 0x1800083b8
mov rcx, qword [0x18003f618]
call fcn.1800046d0
test al, al
je 0x1800083b8
mov rdx, qword [0x18003f550]
mov rcx, rdx
call fcn.1800046d0
test al, al
je 0x1800083b8
mov rcx, qword [0x18003f640]
call fcn.1800046d0
test al, al
je 0x1800083b8
mov rcx, qword [rdx + 0x290]
mov rcx, qword [rcx + 0x4dc]
call fcn.1800046d0
test al, al
je 0x1800083b8
cmp byte [0x18003f597], r12b
mov rdi, qword [rdi + 0x5b4]
je 0x1800078ae
movsxd rcx, dword [0x18003f59c]
lea rax, [0x1800353f8]
mov ecx, dword [rax + rcx*4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800078ae
mov rcx, qword [0x18003f610]
mov byte [rsp + 0x50], 1
test rcx, rcx
je 0x1800078b3
call fcn.1800046d0
test al, al
je 0x1800078b3
jmp 0x1800078c1
mov byte [rsp + 0x50], r12b
mov qword [0x18003f610], r12
mov byte [0x18003f54f], r12b
movss xmm0, dword [0x180039540]
mov rcx, rdi
movss dword [rbp - 0x80], xmm0
call fcn.1800046d0
test al, al
je 0x18000839c
movss xmm13, dword [0x18003943c]
xorps xmm11, xmm11
lea rax, [rdi + 0x2ac]
mov rcx, rdi
mov rsi, qword [rax]
mov qword [rbp + 0x10], rax
call fcn.1800046d0
test al, al
je 0x180008389
mov r9, qword [rdi + 0x440]
mov rcx, r9
call fcn.1800046d0
test al, al
je 0x180008389
test r9, r9
je 0x180008389
mov r8, qword [r9 + 0x4dc]
mov rcx, r8
call fcn.1800046d0
test al, al
je 0x180008389
test r8, r8
je 0x180008389
mov rdx, qword [0x18003f550]
mov rax, qword [rdx + 0x290]
mov rcx, qword [rax + 0x4dc]
mov eax, dword [rcx + 0x298]
cmp dword [r8 + 0x298], eax
je 0x180008389
cmp rdi, qword [0x18003f618]
je 0x180008389
lea rbx, [rdi + 0x3c4]
mov eax, dword [rbx]
dec eax
cmp eax, 0x270f
ja 0x180008389
mov rcx, qword [rdi + 0x48c]
movsd xmm9, qword [rdx + 0x8c]
mov r15d, dword [rdx + 0x94]
lea rdx, [rsp + 0x78]
mov r13d, dword [rdi + 0x88]
movups xmm10, xmmword [rcx + 0xa0]
mov eax, dword [rcx + 0xb8]
movsd xmm0, qword [rcx + 0xb0]
mov r8, qword [0x18003f658]
movaps xmm12, xmm10
and dword [rsp + 0x7c], 0
movaps xmm14, xmm10
and dword [rsp + 0x78], 0
movaps xmm15, xmm10
and dword [rbp - 0x5c], 0
and dword [rbp - 0x60], 0
and dword [rbp - 0x64], 0
and dword [rbp - 0x68], 0
movsd qword [rbp + 0x160], xmm0
movups xmm0, xmmword [r9 + 0x290]
lea r9, [rbp + 0x20]
mov dword [rbp + 0x168], eax
shufps xmm12, xmm10, 0x55
mov rax, qword [0x18003f640]
movaps xmm1, xmm12
subss xmm1, dword [rbp + 0x160]
addss xmm12, dword [rbp + 0x160]
movdqu xmmword [rbp + 0x130], xmm0
mov r14d, dword [rax + 0x49c]
movsd xmm8, qword [rax + 0x494]
movaps xmm0, xmm10
shufps xmm0, xmm10, 0xff
movss dword [rbp - 0x70], xmm1
subss xmm15, xmm0
shufps xmm14, xmm10, 0xaa
addss xmm10, xmm0
movsd xmm0, qword [rdi + 0x80]
movaps xmm1, xmm14
subss xmm1, dword [rbp + 0x164]
addss xmm14, dword [rbp + 0x164]
movsd qword [rbp + 0x140], xmm0
movsd qword [rbp + 0x50], xmm0
movsd qword [rbp + 8], xmm0
movss xmm0, dword [rcx + 0x244]
lea rcx, [rbp + 0x40]
movss dword [rsp + 0x60], xmm1
movss xmm1, dword [r8 + 0x4ec]
lea r8, [rbp + 0x30]
subss xmm1, dword [0x18003941c]
mov dword [rbp - 0x6c], r13d
movsd qword [rbp + 0x120], xmm8
movsd qword [rbp + 0x20], xmm8
mov dword [rbp + 0x28], r14d
comiss xmm0, xmm1
mov dword [rbp + 0x38], r15d
mov dword [rbp + 0x48], r13d
movsd xmm0, qword [rdi + 0x80]
movsd qword [rbp + 0x30], xmm9
seta r12b
movsd qword [rbp + 0x40], xmm0
call fcn.180007018
movss xmm3, dword [rbp + 0x120]
movss xmm0, dword [rbp + 0x124]
subss xmm0, dword [rbp + 0x54]
subss xmm3, dword [rbp + 0x50]
movd xmm2, r14d
movd xmm1, r13d
subss xmm2, xmm1
mov byte [rsp + 0x51], al
mulss xmm0, xmm0
mulss xmm3, xmm3
mulss xmm2, xmm2
addss xmm0, xmm3
addss xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
divss xmm0, dword [0x180039504]
movss xmm6, dword [0x180039528]
subss xmm6, xmm0
comiss xmm11, xmm6
jbe 0x180007b61
movaps xmm6, xmm11
movss xmm1, dword [0x18003f570]
lea rcx, [rbp - 0x58]
movss xmm2, dword [0x18003f548]
movss xmm7, dword [0x180039528]
divss xmm6, dword [0x18003952c]
minss xmm7, xmm0
mulss xmm1, xmm13
movss xmm0, dword [rsp + 0x78]
mulss xmm2, xmm13
divss xmm7, dword [0x18003952c]
subss xmm0, xmm1
movss dword [rbp - 0x58], xmm0
movss xmm0, dword [rsp + 0x7c]
subss xmm0, xmm2
movss dword [rbp - 0x54], xmm0
call fcn.180006ea0
test r12b, r12b
je 0x180007bc9
movaps xmm0, xmm11
jmp 0x180007bd0
movaps xmm0, xmm6
movaps xmm6, xmm11
cmp qword [0x18003f610], rdi
movss dword [rsp + 0x68], xmm0
sete al
movss dword [rsp + 0x6c], xmm7
ucomiss xmm0, xmm11
mov dword [rsp + 0x74], 0x3f800000
movss dword [rsp + 0x70], xmm6
jp 0x180007bfc
je 0x180007c08
movups xmm0, xmmword [0x18003e5d8]
movups xmmword [rsp + 0x68], xmm0
ucomiss xmm6, xmm11
jp 0x180007c10
je 0x180007c1c
movups xmm0, xmmword [0x18003e648]
movups xmmword [rsp + 0x68], xmm0
xor r12d, r12d
test al, al
je 0x180007c2f
movups xmm0, xmmword [0x18003e5f8]
movups xmmword [rsp + 0x68], xmm0
movss xmm1, dword [rbp - 0x70]
lea r9, [rbp + 0x60]
movaps xmm0, xmm15
movsd qword [rbp + 0x60], xmm8
unpcklps xmm0, xmm1
lea r8, [rbp + 0x70]
movss xmm1, dword [rsp + 0x60]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x80]
movss dword [rbp + 0x88], xmm1
mov dword [rbp + 0x68], r14d
movsd qword [rbp + 0x70], xmm9
mov dword [rbp + 0x78], r15d
movsd qword [rbp + 0x80], xmm0
call fcn.180007018
test al, al
je 0x180008389
movaps xmm0, xmm10
movss dword [rbp + 0xb8], xmm14
unpcklps xmm0, xmm12
lea r9, [rbp + 0x90]
lea r8, [rbp + 0xa0]
movsd qword [rbp + 0xb0], xmm0
lea rdx, [rbp - 0x68]
movsd qword [rbp + 0x90], xmm8
lea rcx, [rbp + 0xb0]
mov dword [rbp + 0x98], r14d
movsd qword [rbp + 0xa0], xmm9
mov dword [rbp + 0xa8], r15d
call fcn.180007018
test al, al
je 0x180008389
movsd xmm0, qword [rbp + 0x140]
lea r9, [rbp + 0xc0]
lea r8, [rbp + 0xd0]
movsd qword [rbp + 0xe0], xmm0
lea rdx, [rsp + 0x78]
movsd qword [rbp + 0xc0], xmm8
lea rcx, [rbp + 0xe0]
mov dword [rbp + 0xc8], r14d
movsd qword [rbp + 0xd0], xmm9
mov dword [rbp + 0xd8], r15d
mov dword [rbp + 0xe8], r13d
call fcn.180007018
test al, al
je 0x180008389
movss xmm12, dword [rbp - 0x64]
movss xmm15, dword [rbp - 0x5c]
movaps xmm8, xmm12
mov rcx, qword [0x18003f658]
subss xmm8, xmm15
mov rax, qword [rdi + 0x48c]
movss xmm9, dword [rsp + 0x78]
movss xmm1, dword [rcx + 0x4ec]
subss xmm1, dword [0x18003941c]
movaps xmm10, xmm8
andps xmm8, xmmword [0x1800397b0]
mulss xmm10, dword [0x180039430]
cvtps2pd xmm0, xmm8
andps xmm10, xmmword [0x1800397b0]
mulsd xmm0, qword [0x180039488]
cvtpd2ps xmm6, xmm0
movss xmm0, dword [rax + 0x244]
comiss xmm0, xmm1
movss dword [rsp + 0x60], xmm6
seta r15b
cmp byte [0x18003f5eb], r12b
je 0x180007efc
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x130]
call fcn.180004448
mov r8, rax
cmp qword [rax + 0x18], 0x10
jb 0x180007deb
mov r8, qword [rax]
mov dword [rsp + 0x54], 0x100491c
mov rcx, r12
lea eax, [rcx + 0x39]
xor byte [rsp + rcx + 0x54], al
inc rcx
cmp rcx, 2
jb 0x180007df6
lea rdx, [rsp + 0x54]
mov byte [rsp + 0x57], r12b
lea rcx, [rbp + 0x190]
call fcn.18000916c
mov rdx, qword [rbp + 0x168]
cmp rdx, 0x10
jb 0x180007e5d
mov rcx, qword [rbp + 0x150]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007e58
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008420
call fcn.180031a5c
mov al, byte [0x18003f5eb]
movaps xmm0, xmm10
addss xmm0, xmm9
mov qword [rbp + 0x160], r12
neg al
mov qword [rbp + 0x168], 0xf
mov byte [rbp + 0x150], r12b
sbb ecx, ecx
and ecx, 0xa
subss xmm0, dword [0x180039508]
movss dword [rbp - 0x50], xmm0
movd xmm0, ecx
lea rcx, [0x18003e638]
cvtdq2ps xmm0, xmm0
addss xmm0, xmm12
subss xmm0, dword [0x180039500]
movss dword [rbp - 0x4c], xmm0
call fcn.18000a87c
mov rcx, qword [0x18003e588]
lea rdx, [rbp + 0x190]
mov qword [rsp + 0x40], r12
lea r9, [rbp - 0x50]
movss dword [rsp + 0x38], xmm11
add rcx, 0x19c0
mov qword [rsp + 0x30], r12
movaps xmm2, xmm11
mov qword [rsp + 0x28], rdx
xor edx, edx
mov dword [rsp + 0x20], eax
call fcn.1800293cc
cmp byte [0x18003f5ee], r12b
je 0x180007fdb
mov r14d, dword [rbx]
mov edx, 8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsBadWritePtr]
mov rcx, r12
mov dword [rsp + 0x58], 0x615f1f62
mov word [rsp + 0x5c], 0x100
lea eax, [rcx + 0x39]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 4
jb 0x180007f2c
mov r8d, r14d
mov byte [rsp + 0x5d], r12b
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x150]
call fcn.18000916c
mov al, byte [0x18003f5ee]
movaps xmm0, xmm10
addss xmm0, xmm9
neg al
sbb ecx, ecx
and ecx, 0xa
subss xmm0, dword [0x180039508]
movss dword [rbp - 0x48], xmm0
movd xmm0, ecx
lea rcx, [0x18003e628]
cvtdq2ps xmm0, xmm0
addss xmm0, xmm12
subss xmm0, dword [0x1800394fc]
movss dword [rbp - 0x44], xmm0
call fcn.18000a87c
mov rcx, qword [0x18003e588]
lea rdx, [rbp + 0x150]
mov qword [rsp + 0x40], r12
lea r9, [rbp - 0x48]
movss dword [rsp + 0x38], xmm11
add rcx, 0x19c0
mov qword [rsp + 0x30], r12
movaps xmm2, xmm11
mov qword [rsp + 0x28], rdx
xor edx, edx
mov dword [rsp + 0x20], eax
call fcn.1800293cc
cmp byte [0x18003f5ed], r12b
movss xmm14, dword [rsp + 0x7c]
je 0x180008061
cmp byte [rsp + 0x51], r12b
je 0x180008061
movss xmm0, dword [0x18003f570]
lea rcx, [0x18003e5e8]
movss xmm1, dword [0x18003f548]
mulss xmm0, xmm13
mulss xmm1, xmm13
movss dword [rbp - 0x40], xmm0
movaps xmm0, xmm9
unpcklps xmm0, xmm14
movsd qword [rbp + 0x140], xmm0
movss dword [rbp - 0x3c], xmm1
call fcn.18000a87c
mov rcx, qword [0x18003e588]
lea r8, [rbp + 0x140]
movss xmm0, dword [0x180039470]
lea rdx, [rbp - 0x40]
add rcx, 0x19c0
movss dword [rsp + 0x20], xmm0
mov r9d, eax
call fcn.180028c10
cmp byte [0x18003f5ec], r12b
je 0x180008208
mov eax, dword [0x18003f5e4]
test eax, eax
jne 0x1800081ae
movaps xmm7, xmm10
movss dword [rbp - 0x34], xmm15
movaps xmm6, xmm9
movss dword [rbp - 0x2c], xmm15
addss xmm7, xmm9
subss xmm6, xmm10
lea rcx, [rsp + 0x68]
movss dword [rbp - 0x38], xmm7
movss dword [rbp - 0x30], xmm6
call fcn.18000a87c
mov rcx, qword [0x18003e588]
lea r8, [rbp - 0x38]
movss xmm0, dword [0x18003f590]
lea rdx, [rbp - 0x30]
add rcx, 0x19c0
movss dword [rsp + 0x20], xmm0
mov r9d, eax
mov ebx, eax
call fcn.180028c10
mov rcx, qword [0x18003e588]
lea r8, [rbp - 0x28]
movss xmm0, dword [0x18003f590]
lea rdx, [rbp - 0x20]
add rcx, 0x19c0
movss dword [rbp - 0x28], xmm7
mov r9d, ebx
movss dword [rbp - 0x24], xmm12
movss dword [rbp - 0x20], xmm6
movss dword [rbp - 0x1c], xmm12
movss dword [rsp + 0x20], xmm0
call fcn.180028c10
mov rcx, qword [0x18003e588]
lea r8, [rbp - 0x18]
movss xmm0, dword [0x18003f590]
lea rdx, [rbp - 0x10]
add rcx, 0x19c0
movss dword [rbp - 0x18], xmm6
mov r9d, ebx
movss dword [rbp - 0x14], xmm12
movss dword [rbp - 0x10], xmm6
movss dword [rbp - 0xc], xmm15
movss dword [rsp + 0x20], xmm0
call fcn.180028c10
mov rcx, qword [0x18003e588]
lea r8, [rbp - 8]
movss xmm0, dword [0x18003f590]
lea rdx, [rbp]
add rcx, 0x19c0
movss dword [rbp - 8], xmm7
mov r9d, ebx
movss dword [rbp - 4], xmm12
movss dword [rbp], xmm7
movss dword [rbp + 4], xmm15
movss dword [rsp + 0x20], xmm0
call fcn.180028c10
mov eax, dword [0x18003f5e4]
movss xmm6, dword [rsp + 0x60]
cmp eax, 1
jne 0x180008208
lea rcx, [rsp + 0x68]
call fcn.18000a87c
movaps xmm4, xmm6
mov dword [rsp + 0x60], eax
mulss xmm4, xmm13
lea rax, [rsp + 0x60]
movaps xmm5, xmm8
movaps xmm3, xmm8
mulss xmm5, xmm13
movaps xmm2, xmm6
subss xmm9, xmm4
movss xmm4, dword [0x18003f590]
movss dword [rsp + 0x28], xmm4
subss xmm14, xmm5
mov qword [rsp + 0x20], rax
movaps xmm0, xmm9
movaps xmm1, xmm14
call fcn.180006a90
cmp byte [rsp + 0x50], r12b
je 0x180008389
test r15b, r15b
je 0x180008389
cmp byte [0x18003f54f], r12b
jne 0x180008389
mov rax, qword [0x18003f640]
lea r9, [rbp + 0xf0]
and dword [rbp - 0x74], r12d
lea r8, [rbp + 0x100]
and dword [rbp - 0x78], r12d
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x110]
movsd xmm0, qword [rax + 0x494]
mov eax, dword [rax + 0x49c]
mov dword [rbp + 0xf8], eax
mov rax, qword [0x18003f550]
movsd qword [rbp + 0xf0], xmm0
movsd xmm0, qword [rax + 0x8c]
mov eax, dword [rax + 0x94]
movsd qword [rbp + 0x100], xmm0
movsd xmm0, qword [rbp + 8]
mov dword [rbp + 0x108], eax
mov eax, dword [rbp - 0x6c]
movsd qword [rbp + 0x110], xmm0
mov dword [rbp + 0x118], eax
call fcn.180007018
test al, al
je 0x180008389
movss xmm9, dword [0x18003f570]
movss xmm8, dword [0x18003f548]
movss xmm14, dword [0x18003f5b8]
movss xmm12, dword [rbp - 0x78]
movss xmm10, dword [rbp - 0x74]
mulss xmm9, xmm13
mulss xmm8, xmm13
movaps xmm7, xmm9
movaps xmm1, xmm9
divss xmm7, dword [0x180042f38]
movaps xmm6, xmm8
subss xmm1, xmm12
divss xmm6, dword [0x180042f38]
movaps xmm0, xmm8
mulss xmm7, xmm14
subss xmm0, xmm10
mulss xmm1, xmm1
mulss xmm6, xmm14
mulss xmm0, xmm0
addss xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm1, xmm9
subss xmm1, xmm7
comiss xmm12, xmm1
jb 0x18000835d
addss xmm7, xmm9
comiss xmm7, xmm12
jb 0x18000835d
movaps xmm1, xmm8
subss xmm1, xmm6
comiss xmm10, xmm1
jb 0x18000835d
addss xmm6, xmm8
mov al, 1
comiss xmm6, xmm10
jae 0x180008360
mov al, r12b
comiss xmm14, xmm0
ja 0x18000836a
test al, al
je 0x180008380
movss xmm1, dword [rbp - 0x80]
comiss xmm1, xmm0
jbe 0x180008380
movss dword [rbp - 0x80], xmm0
mov qword [0x18003f610], rdi
mov rdi, qword [rbp + 0x10]
mov rdi, qword [rdi]
jmp 0x18000838c
mov rdi, rsi
mov rcx, rdi
call fcn.1800046d0
test al, al
jne 0x1800078eb
mov rcx, qword [0x18003f610]
call fcn.1800046d0
test al, al
je 0x1800083b8
mov byte [0x18003f54f], 1
call fcn.1800072ac
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.180031a00
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3