Function at 0x18000fd40
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x1380]
mov eax, 0x1480
call fcn.180050bc0
sub rsp, rax
mov rax, qword [0x180065010]
xor rax, rsp
mov qword [rbp + 0x1370], rax
xor ebx, ebx
mov dword [rbp - 0x30], ebx
cmp byte [0x180066110], bl
je 0x180006be3
cmp byte [0x180066040], bl
jne 0x180006be3
call fcn.18004da00
test al, al
jne 0x180006be3
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
lea r8d, [rbx + 0x1c]
lea rdx, str.net.minecraft.item.ItemBlock
lea rcx, [rsp + 0x20]
call fcn.180005b90
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x20]
call fcn.18004e270
mov rax, qword [0x180066108]
lea rdx, [rsp + 0x60]
mov rcx, qword [rax + 0x38]
call fcn.18000ef80
nop
mov rbx, qword [0x180065fb0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx]
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x180065f30]
call fcn.1800049b0
mov rbx, rax
lea rcx, [rsp + 0x20]
call fcn.180006460
nop
lea rsi, vtable.CItemStack.0
mov qword [rsp + 0x20], rsi
cmp byte [0x180065f98], 0
jne 0x18000677a
call fcn.180005d00
mov rcx, qword [0x180065fc0]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x48], rbx
mov edi, 4
lea rcx, [rsp + 0x20]
mov rax, qword [vtable.CItemStack.0]
call rax
mov rbx, rax
mov r8, qword [rsp + 0x38]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.1800065c0
lea edx, [rdi + 0x44]
mov rcx, qword [rsp + 0x38]
call fcn.18004fc00
mov r8, qword [rsp + 0x28]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x28]
call fcn.1800065c0
lea edx, [rdi + 0x44]
mov rcx, qword [rsp + 0x28]
call fcn.18004fc00
nop
mov r8, qword [rsp + 0x78]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x78]
call fcn.1800065c0
lea edx, [rdi + 0x44]
mov rcx, qword [rsp + 0x78]
call fcn.18004fc00
mov r8, qword [rsp + 0x68]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x68]
call fcn.1800065c0
lea edx, [rdi + 0x44]
mov rcx, qword [rsp + 0x68]
call fcn.18004fc00
test rbx, rbx
je 0x180006be3
cmp byte [0x180065034], 0
je 0x180006918
mov rax, qword [0x180066108]
lea rdx, [rbp - 0x68]
mov rcx, qword [rax + 0x38]
call fcn.18000ef80
nop
mov dword [rbp - 0x30], 5
mov rbx, qword [0x180065fb0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx]
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x180065f30]
call fcn.1800049b0
mov rbx, rax
lea rcx, [rsp + 0x20]
call fcn.180006460
nop
mov qword [rsp + 0x20], rsi
cmp byte [0x180065f98], 0
jne 0x1800068af
call fcn.180005d00
mov rcx, qword [0x180065fc0]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x48], rbx
mov edi, 0xf
mov dword [rbp - 0x30], edi
mov rbx, qword [0x180065fb8]
lea rcx, [rsp + 0x20]
mov rax, qword [vtable.CItemStack.0]
call rax
mov r8, rbx
mov rdx, rax
mov rcx, qword [0x180065f30]
call fcn.1800049b0
mov rcx, qword [0x180065f30]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x100]
mov r8, qword [rsp + 0x58]
mov rdx, rax
call r9
test al, al
jne 0x180006918
mov bl, 1
jmp 0x18000691a
xor bl, bl
test dil, 2
je 0x180006972
and edi, 0xfffffffd
mov r8, qword [rsp + 0x38]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.1800065c0
mov edx, 0x48
mov rcx, qword [rsp + 0x38]
call fcn.18004fc00
mov r8, qword [rsp + 0x28]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x28]
call fcn.1800065c0
mov edx, 0x48
mov rcx, qword [rsp + 0x28]
call fcn.18004fc00
nop
test dil, 1
je 0x1800069be
mov r8, qword [rbp - 0x50]
mov r8, qword [r8 + 8]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x50]
call fcn.1800065c0
mov edx, 0x48
mov rcx, qword [rbp - 0x50]
call fcn.18004fc00
mov r8, qword [rbp - 0x60]
mov r8, qword [r8 + 8]
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x60]
call fcn.1800065c0
mov edx, 0x48
mov rcx, qword [rbp - 0x60]
call fcn.18004fc00
test bl, bl
jne 0x180006be3
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0x346dc5d63886594b
imul rcx
mov rbx, rdx
sar rbx, 0xb
mov rax, rbx
shr rax, 0x3f
add rbx, rax
mov eax, dword [0x180066048]
test eax, eax
jne 0x1800069ff
mov eax, ebx
mov dword [0x180066048], ebx
mov ecx, ebx
sub ecx, eax
mov eax, 0x3e8
cdq
idiv dword [0x180065040]
cmp ecx, eax
jl 0x180006be3
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006be3
lea rcx, [rbp - 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
movzx r9d, word [rbp - 0x2c]
shl r9d, 0x10
movzx eax, word [rbp - 0x30]
or r9, rax
mov edx, 0x204
mov r8d, 2
mov rcx, qword [0x180066118]
call qword [sym.imp.USER32.dll_SendMessageA]
movzx r9d, word [rbp - 0x2c]
shl r9d, 0x10
movzx eax, word [rbp - 0x30]
or r9, rax
xor r8d, r8d
mov edx, 0x205
mov rcx, qword [0x180066118]
call qword [sym.imp.USER32.dll_SendMessageA]
mov dword [0x180066048], ebx
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1364], 0xffffffff
mov dword [rbp - 0x1c], eax
mov edx, 1
mov r9d, 0x270
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 - 0x1c], eax
inc rdx
cmp rdx, r9
jb 0x180006ab0
mov dword [rbp - 0x20], r9d
cvttss2si ecx, dword [0x18006503c]
cvttss2si edx, dword [0x180065038]
lea eax, [rcx - 0x80000000]
mov r14d, 0x80000000
lea esi, [rcx + r14]
cmp ecx, r14d
cmovae esi, eax
lea eax, [rdx - 0x80000000]
lea ecx, [rdx + r14]
cmp edx, r14d
cmovae ecx, eax
sub ecx, esi
cmp ecx, 0xffffffff
jne 0x180006b81
lea r8, [rbp - 0x18]
mov edx, dword [r8 - 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, dword [r8 - 4]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
and ecx, 0x9908b0df
xor ecx, dword [r8 + 0x630]
shr edx, 1
xor ecx, edx
mov dword [r8 + 0x9bc], ecx
lea r8, [r8 + 4]
sub r9, 1
jne 0x180006b10
mov eax, dword [rbp - 0x20]
mov ecx, dword [rbp + rax*4 - 0x1c]
mov eax, ecx
shr eax, 0xb
and eax, dword [rbp + 0x1364]
xor ecx, eax
mov eax, ecx
and eax, 0xff3a58ad
shl eax, 7
xor ecx, eax
mov eax, ecx
and eax, 0xffffdf8c
shl eax, 0xf
xor ecx, eax
mov r8d, ecx
shr r8d, 0x12
xor r8d, ecx
jmp 0x180006bc9
lea ebx, [rcx + 1]
lea rcx, [rbp - 0x20]
call fcn.180006f10
mov edi, ebx
mov r8d, eax
imul r8, rdi
cmp r8d, ebx
jae 0x180006bc5
mov eax, ebx
neg eax
xor edx, edx
div ebx
mov ebx, edx
cmp r8d, edx
jae 0x180006bc5
nop word [rax + rax]
lea rcx, [rbp - 0x20]
call fcn.180006f10
mov r8d, eax
imul r8, rdi
cmp r8d, ebx
jb 0x180006bb0
shr r8, 0x20
lea edx, [r8 + rsi]
lea eax, [rdx + r14]
lea ecx, [rdx - 0x80000000]
cmp edx, r14d
cmovae ecx, eax
mov dword [0x180065040], ecx
mov rcx, qword [rbp + 0x1370]
xor rcx, rsp
call fcn.18004fa20
lea r11, [rsp + 0x1480]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
sub rsp, 0x28
mov rax, qword [0x180066108]
mov rcx, qword [rax + 0x38]
mov rax, qword [rcx]
call qword [rax]
test rax, rax
je 0x18000fd90
mov rax, qword [0x180066108]
mov rcx, qword [rax + 0x40]
mov rax, qword [rcx]
call qword [rax]
test rax, rax
je 0x18000fd90
call fcn.18000f090
call fcn.18000b520
call fcn.180008c70
call fcn.180007a20
call fcn.1800070a0
add rsp, 0x28
jmp 0x180006680
mov byte [0x180066121], 0
add rsp, 0x28
ret