Function at 0x140006b20
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x48]
sub rsp, 0x120
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
xor ebx, ebx
mov ecx, 1
call fcn.140007a74
mov r13, rax
mov qword [rbp + 0x50], rax
mov r12, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r14, qword [0x14000b100]
movabs rax, 0x7fffffffffffffff
mov rcx, rax
sub rcx, r14
cmp rcx, 0x25
jb 0x140007497
lea r15, str.UniW.dll
cmp qword [0x14000b108], 0xf
cmova r15, qword [str.UniW.dll]
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], rbx
lea rsi, [r14 + 0x25]
mov edi, 0xf
lea rbx, [rbp - 0x48]
mov ecx, 0x16
cmp rsi, rdi
jbe 0x140006c37
mov rdi, rsi
or rdi, 0xf
cmp rdi, rax
jbe 0x140006bff
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140007a74
test rax, rax
je 0x140006da6
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140006c33
cmp rdi, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140006c13
xor ebx, ebx
jmp 0x140006c33
cmp rcx, 0x1000
jb 0x140006c2b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000749d
jmp 0x140006be0
call fcn.140007a74
mov rbx, rax
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x30], rdi
movups xmm0, xmmword [str._n_UniW__Creds_to_VMP__3___n_DLL_Name:]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [0x140009628]
movups xmmword [rbx + 0x10], xmm1
mov eax, dword [0x140009638]
mov dword [rbx + 0x20], eax
movzx eax, byte [0x14000963c]
mov byte [rbx + 0x24], al
lea rcx, [rbx + 0x25]
mov r8, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x30]
mov rax, rdx
sub rax, rcx
cmp rax, 0x18
jb 0x140006cc5
lea rax, [rcx + 0x18]
mov qword [rbp - 0x38], rax
lea rbx, [rbp - 0x48]
cmp rdx, 0xf
cmova rbx, qword [rbp - 0x48]
add rbx, rcx
mov r8d, 0x18
lea rdx, str._n_n_Press__F5__in_Lobby_n_n
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x18], 0
lea rax, [rbp - 0x48]
jmp 0x140006cdc
mov qword [rsp + 0x20], 0x18
mov edx, 0x18
lea rcx, [rbp - 0x48]
call fcn.1400076c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xor edi, edi
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x10], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rdx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x18]
mov rcx, r12
call fcn.140007850
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x140006d64
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006d5f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140007ab0
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x140006db2
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006dad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006dad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140007ab0
mov ebx, 0x133
lea rsi, [0x14000b2d8]
movdqa xmm7, xmmword [0x1400096c0]
movdqa xmm6, xmmword [0x1400096b0]
nop
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140006dd0
mov ecx, 0x46
xor edx, edx
call fcn.140001760
mov word [rsp + 0x30], ax
mov ecx, 0x6f
mov edx, 1
call fcn.140001760
mov word [rsp + 0x32], ax
mov ecx, 0x72
mov edx, 2
call fcn.140001760
mov word [rsp + 0x34], ax
mov ecx, 0x74
mov edx, 3
call fcn.140001760
mov word [rsp + 0x36], ax
mov ecx, 0x6e
mov edx, 4
call fcn.140001760
mov word [rsp + 0x38], ax
mov ecx, 0x69
mov edx, 5
call fcn.140001760
mov word [rsp + 0x3a], ax
mov ecx, 0x74
mov edx, 6
call fcn.140001760
mov word [rsp + 0x3c], ax
mov ecx, 0x65
mov edx, 7
call fcn.140001760
mov word [rsp + 0x3e], ax
mov ecx, 0x43
mov edx, 8
call fcn.140001760
mov word [rsp + 0x40], ax
mov ecx, 0x6c
mov edx, 9
call fcn.140001760
mov word [rsp + 0x42], ax
mov ecx, 0x69
mov edx, 0xa
call fcn.140001760
mov word [rsp + 0x44], ax
mov ecx, 0x65
mov edx, 0xb
call fcn.140001760
mov word [rsp + 0x46], ax
mov ecx, 0x6e
mov edx, 0xc
call fcn.140001760
mov word [rsp + 0x48], ax
mov ecx, 0x74
mov edx, 0xd
call fcn.140001760
mov word [rsp + 0x4a], ax
mov ecx, 0x2d
mov edx, 0xe
call fcn.140001760
mov word [rsp + 0x4c], ax
mov ecx, 0x57
mov edx, 0xf
call fcn.140001760
mov word [rsp + 0x4e], ax
mov ecx, 0x69
mov edx, 0x10
call fcn.140001760
mov word [rsp + 0x50], ax
mov ecx, 0x6e
mov edx, 0x11
call fcn.140001760
mov word [rsp + 0x52], ax
mov ecx, 0x36
mov edx, 0x12
call fcn.140001760
mov word [rsp + 0x54], ax
mov ecx, 0x34
mov edx, 0x13
call fcn.140001760
mov word [rsp + 0x56], ax
mov ecx, 0x2d
mov edx, 0x14
call fcn.140001760
mov word [rsp + 0x58], ax
mov ecx, 0x53
mov edx, 0x15
call fcn.140001760
mov word [rsp + 0x5a], ax
mov ecx, 0x68
mov edx, 0x16
call fcn.140001760
mov word [rsp + 0x5c], ax
mov ecx, 0x69
mov edx, 0x17
call fcn.140001760
mov word [rsp + 0x5e], ax
mov ecx, 0x70
mov edx, 0x18
call fcn.140001760
mov word [rsp + 0x60], ax
mov ecx, 0x70
mov edx, 0x19
call fcn.140001760
mov word [rsp + 0x62], ax
mov ecx, 0x69
mov edx, 0x1a
call fcn.140001760
mov word [rsp + 0x64], ax
mov ecx, 0x6e
mov edx, 0x1b
call fcn.140001760
mov word [rsp + 0x66], ax
mov ecx, 0x67
mov edx, 0x1c
call fcn.140001760
mov word [rsp + 0x68], ax
mov ecx, 0x2e
mov edx, 0x1d
call fcn.140001760
mov word [rsp + 0x6a], ax
mov ecx, 0x65
mov edx, 0x1e
call fcn.140001760
mov word [rsp + 0x6c], ax
mov ecx, 0x78
mov edx, 0x1f
call fcn.140001760
mov word [rsp + 0x6e], ax
mov ecx, 0x65
mov edx, 0x20
call fcn.140001760
mov word [rsp + 0x70], ax
xor ecx, ecx
mov edx, 0x21
call fcn.140001760
mov word [rsp + 0x72], ax
mov edx, 0x22
movzx ecx, word [0x140009684]
call fcn.140001760
mov word [rsp + 0x74], ax
mov edx, 0x23
movzx ecx, word [0x140009686]
call fcn.140001760
mov word [rsp + 0x76], ax
mov edx, 0x24
movzx ecx, word [0x140009688]
call fcn.140001760
mov word [rsp + 0x78], ax
mov edx, 0x25
movzx ecx, word [0x14000968a]
call fcn.140001760
mov word [rsp + 0x7a], ax
mov edx, 0x26
movzx ecx, word [0x14000968c]
call fcn.140001760
mov word [rsp + 0x7c], ax
mov edx, 0x27
movzx ecx, word [0x14000968e]
call fcn.140001760
mov word [rsp + 0x7e], ax
mov edx, 0x28
movzx ecx, word [0x140009690]
call fcn.140001760
mov word [rbp - 0x80], ax
mov edx, 0x29
movzx ecx, word [0x140009692]
call fcn.140001760
mov word [rbp - 0x7e], ax
mov edx, 0x2a
movzx ecx, word [0x140009694]
call fcn.140001760
mov word [rbp - 0x7c], ax
mov edx, 0x2b
movzx ecx, word [0x140009696]
call fcn.140001760
mov word [rbp - 0x7a], ax
mov edx, 0x2c
movzx ecx, word [0x140009698]
call fcn.140001760
mov word [rbp - 0x78], ax
mov edx, 0x2d
movzx ecx, word [0x14000969a]
call fcn.140001760
mov word [rbp - 0x76], ax
mov edx, 0x2e
movzx ecx, word [0x14000969c]
call fcn.140001760
mov word [rbp - 0x74], ax
mov edx, 0x2f
movzx ecx, word [0x14000969e]
call fcn.140001760
mov word [rbp - 0x72], ax
mov edx, 0x30
movzx ecx, word [0x1400096a0]
call fcn.140001760
mov word [rbp - 0x70], ax
mov edx, 0x31
movzx ecx, word [0x1400096a2]
call fcn.140001760
mov word [rbp - 0x6e], ax
mov edx, 0x32
movzx ecx, word [0x1400096a4]
call fcn.140001760
mov word [rbp - 0x6c], ax
mov edx, 0x33
movzx ecx, word [0x1400096a6]
call fcn.140001760
mov word [rbp - 0x6a], ax
mov edx, 0x34
movzx ecx, word [0x1400096a8]
call fcn.140001760
mov word [rbp - 0x68], ax
mov edx, 0x35
movzx ecx, word [0x1400096aa]
call fcn.140001760
mov word [rbp - 0x66], ax
mov edx, 0x36
movzx ecx, word [0x1400096ac]
call fcn.140001760
mov word [rbp - 0x64], ax
mov edx, 0x37
movzx ecx, word [0x1400096ae]
call fcn.140001760
mov word [rbp - 0x62], ax
mov edx, 0x38
movzx ecx, word [0x1400096b0]
call fcn.140001760
mov word [rbp - 0x60], ax
mov edx, 0x39
movzx ecx, word [0x1400096b2]
call fcn.140001760
mov word [rbp - 0x5e], ax
mov edx, 0x3a
movzx ecx, word [0x1400096b4]
call fcn.140001760
mov word [rbp - 0x5c], ax
mov edx, 0x3b
movzx ecx, word [0x1400096b6]
call fcn.140001760
mov word [rbp - 0x5a], ax
mov edx, 0x3c
movzx ecx, word [0x1400096b8]
call fcn.140001760
mov word [rbp - 0x58], ax
mov edx, 0x3d
movzx ecx, word [0x1400096ba]
call fcn.140001760
mov word [rbp - 0x56], ax
mov edx, 0x3e
movzx ecx, word [0x1400096bc]
call fcn.140001760
mov word [rbp - 0x54], ax
mov edx, 0x3f
movzx ecx, word [0x1400096be]
call fcn.140001760
mov word [rbp - 0x52], ax
mov edx, 0x40
movzx ecx, word [0x1400096c0]
call fcn.140001760
mov word [rbp - 0x50], ax
mov edx, 0x41
movzx ecx, word [0x1400096c2]
call fcn.140001760
mov word [rbp - 0x4e], ax
mov edx, 0x42
movzx ecx, word [0x1400096c4]
call fcn.140001760
mov word [rbp - 0x4c], ax
xor eax, eax
mov word [rbp - 0x4a], ax
mov eax, edi
mov rdx, rdi
mov r8d, 8
nop
movd xmm0, eax
pshufd xmm0, xmm0, 0
paddd xmm0, xmm6
pshufhw xmm0, xmm0, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rsp + rdx*2 + 0x30]
xorps xmm3, xmm0
movq qword [rsp + rdx*2 + 0x30], xmm3
movsxd rcx, r8d
lea rdx, [rsp + rcx*2 + 0x28]
lea ecx, [r8 - 4]
movd xmm0, ecx
pshufd xmm0, xmm0, 0
paddd xmm0, xmm6
pshufhw xmm0, xmm0, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rdx]
xorps xmm3, xmm0
movq qword [rdx], xmm3
movsxd rcx, r8d
movd xmm0, r8d
pshufd xmm0, xmm0, 0
paddd xmm0, xmm6
pshufhw xmm0, xmm0, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rsp + rcx*2 + 0x30]
xorps xmm3, xmm0
movq qword [rsp + rcx*2 + 0x30], xmm3
movsxd rcx, r8d
lea rdx, [rsp + 0x38]
lea rdx, [rdx + rcx*2]
lea ecx, [r8 + 4]
movd xmm0, ecx
pshufd xmm0, xmm0, 0
paddd xmm0, xmm6
pshufhw xmm0, xmm0, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rdx]
xorps xmm3, xmm0
movq qword [rdx], xmm3
add eax, 0x10
add r8d, 0x10
movsxd rdx, eax
cmp rdx, 0x40
jb 0x140007350
cmp rdx, 0x43
jae 0x140007463
nop
lea ecx, [rbx + rax]
xor word [rsp + rdx*2 + 0x30], cx
inc eax
movsxd rdx, eax
cmp rdx, 0x43
jb 0x140007450
mov word [rbp - 0x4a], di
mov rdx, rsi
cmp qword [0x14000b2f0], 7
cmova rdx, qword [0x14000b2d8]
lea r8, [rsp + 0x30]
mov rcx, r13
call fcn.1400026f0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140006dd0
call fcn.140006b00
int3
call fcn.140006a60
int3