Function at 0x1400a3b60
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x1401150f0]
xor rax, rsp
mov qword [rbp + 0x3f], rax
cmp qword [0x140116758], 0
jne 0x1400a3b98
call fcn.140022dc0
mov rcx, qword [0x140116778]
lea rdx, [rbp + 0x17]
mov rdi, qword [0x140116630]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp + 0x1f]
lea rcx, [rbp - 1]
sub eax, dword [rbp + 0x17]
movd xmm1, eax
mov eax, dword [rbp + 0x23]
sub eax, dword [rbp + 0x1b]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0x10], xmm1
movss dword [rdi + 0x14], xmm0
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp - 1]
xorps xmm1, xmm1
mov rax, rcx
xorps xmm0, xmm0
sub rax, qword [0x140116780]
cvtsi2ss xmm0, qword [0x140116788]
cvtsi2ss xmm1, rax
divss xmm1, xmm0
movss dword [rdi + 0x18], xmm1
mov qword [0x140116780], rcx
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_recv
and al, 1
mov byte [rdi + 0x130], al
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_select
and al, 1
mov byte [rdi + 0x131], al
call qword [sym.imp.USER32.dll_GetKeyState]
mov rbx, qword [0x140116630]
shr eax, 0xf
and al, 1
mov byte [rdi + 0x133], 0
mov byte [rdi + 0x132], al
cmp byte [rbx + 0x3af], 0
je 0x1400a3c9c
cvttss2si eax, dword [rbx + 0x118]
mov rcx, qword [0x140116778]
lea rdx, [rbp + 0xf]
mov dword [rbp + 0xf], eax
cvttss2si eax, dword [rbx + 0x11c]
mov dword [rbp + 0x13], eax
call qword [sym.imp.USER32.dll_ClientToScreen]
mov edx, dword [rbp + 0x13]
mov ecx, dword [rbp + 0xf]
call qword [sym.imp.USER32.dll_SetCursorPos]
mov dword [rbx + 0x118], 0xff7fffff
mov dword [rbx + 0x11c], 0xff7fffff
call qword [sym.imp.USER32.dll_GetActiveWindow]
cmp rax, qword [0x140116778]
jne 0x1400a3d02
lea rcx, [rbp - 9]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x1400a3d02
mov rcx, qword [0x140116778]
lea rdx, [rbp - 9]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x1400a3d02
movd xmm0, dword [rbp - 9]
movd xmm1, dword [rbp - 5]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbx + 0x118], xmm0
movss dword [rbx + 0x11c], xmm1
cmp byte [rdi + 0xd0], 0
je 0x1400a3d12
mov eax, 0xffffffff
jmp 0x1400a3d1f
mov rax, qword [0x140116630]
mov eax, dword [rax + 0x1d70]
cmp dword [reloc.WS2_32.dll_htonl], eax
je 0x1400a3d32
mov dword [reloc.WS2_32.dll_htonl], eax
call fcn.140022f10
call fcn.140005940
movss xmm6, dword [0x140108240]
xor edi, edi
cmp byte [reloc.WS2_32.dll_accept], dil
je 0x1400a42d2
mov rdx, qword [0x140116630]
mov ecx, edi
movaps xmm1, xmmword [0x140108a10]
movaps xmm0, xmmword [0x140108a00]
mov dword [rbp + 0x37], 0x1223f32
mov dword [rdx + 0x155c], 0x41200000
mov dword [rdx + 0x1574], 0x41000000
mov dword [rdx + 0x158c], 0x41000000
mov dword [rdx + 0x15c0], 0x41000000
mov dword [rdx + 0x15b8], 0x41000000
mov dword [rdx + 0x1560], 0x3f800000
mov dword [rdx + 0x1590], 0x3f800000
movups xmmword [rdx + 0x1610], xmm0
mov word [rbp + 0x3b], 0x100
movaps xmm0, xmmword [0x140108a20]
movups xmmword [rdx + 0x16a0], xmm0
movaps xmm0, xmmword [0x140108ae0]
movups xmmword [rdx + 0x1690], xmm1
movups xmmword [rdx + 0x1740], xmm1
movaps xmm1, xmm0
movaps xmm1, xmmword [0x140108a20]
movups xmmword [rdx + 0x1750], xmm0
movups xmmword [rdx + 0x1760], xmm0
movups xmmword [rdx + 0x1710], xmm0
movaps xmm0, xmmword [0x140108a70]
movups xmmword [rdx + 0x1660], xmm1
movaps xmm1, xmmword [0x140108a50]
movups xmmword [rdx + 0x1670], xmm0
movaps xmm0, xmmword [0x140108ae0]
movups xmmword [rdx + 0x1680], xmm1
movaps xmm1, xmmword [0x140108aa0]
movups xmmword [rdx + 0x1720], xmm0
movaps xmm0, xmmword [0x140108b80]
movups xmmword [rdx + 0x1730], xmm1
movaps xmm1, xmmword [0x140108ae0]
movups xmmword [rdx + 0x15f0], xmm0
movaps xmm0, xmmword [0x140108b10]
movups xmmword [rdx + 0x1770], xmm1
movss xmm1, dword [0x14010832c]
movups xmmword [rdx + 0x1780], xmm0
movss xmm0, dword [0x140108330]
movss dword [rbp + 0x13], xmm1
movdqa xmm1, xmmword [0x140108c30]
movss dword [rbp + 0xf], xmm0
movdqa xmm0, xmmword [str.jvklz__a]
movdqu xmmword [rbp + 0x27], xmm1
movdqu xmmword [rbp + 0x17], xmm0
nop
lea eax, [rcx + 0x39]
xor byte [rbp + rcx + 0x17], al
inc rcx
cmp rcx, 0x24
jb 0x1400a3ea0
movsd xmm0, qword [rbp + 0xf]
lea rcx, [rbp + 0x17]
movsd qword [rdx + 0x1af4], xmm0
mov r8d, Ordinal_35
mov dword [rdx + 0x1acc], 4
mov dword [rdx + 0x1b28], 0x3f800000
mov dword [rdx + 0x1ae0], 1
lea rdx, reloc.WS2_32.dll_accept
mov byte [rbp + 0x3c], dil
call fcn.140009320
mov rcx, rdi
mov dword [rbp - 1], 0x5e5a547c
mov dword [rbp + 3], 0x51f5b51
mov dword [rbp + 7], 0x1003232
nop dword [rax]
lea eax, [rcx + 0x39]
xor byte [rbp + rcx - 1], al
inc rcx
cmp rcx, 0xa
jb 0x1400a3f10
lea rdx, [0x140115141]
mov byte [rbp + 0xa], dil
lea rcx, [rbp - 1]
call fcn.140024eb0
mov rcx, rdi
mov dword [rbp - 1], 0x1c43557b
mov dword [rbp + 3], 0x4f4d78
mov byte [rbp + 7], 1
nop dword [rax]
lea eax, [rcx + 0x39]
xor byte [rbp + rcx - 1], al
inc rcx
cmp rcx, 7
jb 0x1400a3f50
lea rdx, [0x140115142]
mov byte [rbp + 7], dil
lea rcx, [rbp - 1]
call fcn.140024eb0
mov rcx, rdi
mov dword [rbp - 1], 0x4c5a546a
mov dword [rbp + 3], 0x2e56521d
mov word [rbp + 7], Ordinal_41
mov byte [rbp + 9], 1
nop
lea eax, [rcx + 0x39]
xor byte [rbp + rcx - 1], al
inc rcx
cmp rcx, 9
jb 0x1400a3f90
lea rdx, [0x140115150]
mov byte [rbp + 9], dil
lea rcx, [rbp - 1]
call fcn.140024eb0
mov rcx, rdi
mov dword [rbp - 1], 0x59565b77
mov dword [rbp + 3], 0x304c7b1d
mov word [rbp + 7], 0x100
nop dword [rax + rax]
lea eax, [rcx + 0x39]
xor byte [rbp + rcx - 1], al
inc rcx
cmp rcx, 8
jb 0x1400a3fd0
lea rdx, [0x140115140]
mov byte [rbp + 8], dil
lea rcx, [rbp - 1]
call fcn.140024eb0
call fcn.1400253d0
mov rcx, rdi
mov dword [rbp + 0xf], 0x5e565378
mov dword [rbp + 0x13], 0x1004a52
nop word [rax + rax]
lea eax, [rcx + 0x39]
xor byte [rbp + rcx + 0xf], al
inc rcx
cmp rcx, 6
jb 0x1400a4010
lea rdx, [0x140115143]
mov byte [rbp + 0x16], dil
lea rcx, [rbp + 0xf]
call fcn.140024eb0
movss xmm1, dword [0x140108368]
xorps xmm0, xmm0
call fcn.14000ce80
movdqa xmm0, xmmword [0x140108500]
mov rcx, rdi
movdqu xmmword [rbp + 0x17], xmm0
mov word [rbp + Ordinal_41], 0x27
mov byte [rbp + 0x29], 1
nop
lea eax, [rcx + 0x39]
xor byte [rbp + rcx + 0x17], al
inc rcx
cmp rcx, 0x11
jb 0x1400a4060
lea rdx, [0x140116629]
mov byte [rbp + 0x29], dil
lea rcx, [rbp + 0x17]
call fcn.140024eb0
mov rcx, rdi
mov dword [rbp - 1], 0x5e565378
mov dword [rbp + 3], 0xb1f4a52
mov dword [rbp + 7], 0x1003b24
nop dword [rax]
lea eax, [rcx + 0x39]
xor byte [rbp + rcx - 1], al
inc rcx
cmp rcx, 0xa
jb 0x1400a40a0
lea r9, str.Left_Mouse_Button
mov byte [rbp + 0xa], dil
lea rdx, [0x1401156bc]
mov dword [rsp + 0x20], 0x3f
lea rcx, [rbp - 1]
call fcn.140026390
mov rcx, rdi
mov dword [rbp - 1], 0x5e565378
mov dword [rbp + 3], 0x21f4a52
mov dword [rbp + 7], 0x262c2e
mov byte [rbp + 0xb], 1
nop
lea eax, [rcx + 0x39]
xor byte [rbp + rcx - 1], al
inc rcx
cmp rcx, 0xb
jb 0x1400a40f0
lea r9, str.Head
mov byte [rbp + 0xb], dil
lea rdx, [0x14011671c]
mov dword [rsp + 0x20], 4
lea rcx, [rbp - 1]
call fcn.140026390
mov rcx, rdi
mov dword [rbp - 1], 0x5e565378
mov dword [rbp + 3], 0x61f4a52
mov dword [rbp + 7], 0x100140e
nop dword [rax + rax]
lea eax, [rcx + 0x39]
xor byte [rbp + rcx - 1], al
inc rcx
cmp rcx, 0xa
jb 0x1400a4140
movss xmm0, dword [0x14010831c]
lea rax, str._.3f
movss xmm1, dword [0x140108304]
lea r9, [rbp + 0xf]
movss dword [rsp + 0x30], xmm6
lea r8, [0x14011514c]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 1]
lea rax, [rbp - 9]
movss dword [rbp - 9], xmm0
mov edx, 4
mov qword [rsp + 0x20], rax
movss dword [rbp + 0xf], xmm1
mov byte [rbp + 0xa], dil
call fcn.140026970
mov rcx, rdi
mov dword [rbp - 1], 0x5e565378
mov dword [rbp + 3], 0x131f4a52
mov dword [rbp + 7], 0x20262731
mov word [rbp + 0xb], 0x100
lea eax, [rcx + 0x39]
xor byte [rbp + rcx - 1], al
inc rcx
cmp rcx, 0xc
jb 0x1400a41c0
movss dword [rsp + 0x30], xmm6
lea rax, [rbp + 0xf]
lea rbx, [0x140103f6c]
mov byte [rbp + 0xc], dil
mov qword [rsp + 0x28], rbx
lea r9, [rbp - 9]
lea r8, [0x140115144]
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp + 0xf], 0xa
lea rcx, [rbp - 1]
mov dword [rbp - 9], 1
call fcn.140026970
movdqa xmm0, xmmword [0x140108540]
mov rcx, rdi
movdqu xmmword [rbp + 0x17], xmm0
mov word [rbp + 0x27], 0x69
mov byte [rbp + 0x29], 1
nop dword [rax]
lea eax, [rcx + 0x39]
xor byte [rbp + rcx + 0x17], al
inc rcx
cmp rcx, 0x11
jb 0x1400a4230
movss dword [rsp + 0x30], xmm6
lea rax, [rbp + 0xf]
mov qword [rsp + 0x28], rbx
lea r9, [rbp - 9]
lea r8, [0x140115148]
mov qword [rsp + 0x20], rax
xor edx, edx
mov byte [rbp + 0x29], dil
lea rcx, [rbp + 0x17]
mov dword [rbp + 0xf], 0xa
mov dword [rbp - 9], 1
call fcn.140026970
movdqa xmm0, xmmword [0x1401084c0]
mov rcx, rdi
movdqa xmm1, xmmword [0x140108c40]
movdqu xmmword [rbp + 0x17], xmm0
mov dword [rbp + 0x37], 0x393f3e38
movdqu xmmword [rbp + 0x27], xmm1
mov word [rbp + 0x3b], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x3d], 1
nop word [rax + rax]
lea eax, [rcx + 0x39]
xor byte [rbp + rcx + 0x17], al
inc rcx
cmp rcx, 0x25
jb 0x1400a42b0
lea rcx, [rbp + 0x17]
mov byte [rbp + 0x3d], dil
call fcn.140023c10
call fcn.14000c170
call fcn.1400a2c00
call fcn.140006c10
mov rcx, qword [0x1401168d8]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1401168d8]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1401168d8]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x1401168d8]
mov r9d, 1
mov dword [rsp + 0x30], edi
xor r8d, r8d
movss dword [rsp + 0x28], xmm6
xor edx, edx
mov dword [rsp + 0x20], edi
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x1401168d8]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x1400a438e
call fcn.1400070b0
mov rcx, qword [0x140116630]
add rcx, 0x1c70
cmp byte [rcx], dil
cmove rcx, rdi
call fcn.1400224f0
mov rcx, qword [0x1401168d8]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1401168d8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x1400a4450
mov rcx, qword [0x1401168d8]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x1400a4450
cmp qword [0x140116768], rdi
je 0x1400a4434
mov rcx, qword [0x140116770]
test rcx, rcx
je 0x1400a43f0
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140116770], rdi
mov rcx, qword [0x140116760]
test rcx, rcx
je 0x1400a4409
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140116760], rdi
mov rcx, qword [0x140116758]
mov rbx, qword [0x140116630]
test rcx, rcx
je 0x1400a4422
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140116758], rdi
mov rax, qword [rbx + 0xa0]
mov qword [rax + 8], rdi
mov rcx, qword [0x1401168d8]
lea rdx, [0x140116650]
mov rax, qword [rcx]
call qword [rax + 0x80]
call fcn.140022dc0
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1400f3620
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret