Function at 0x14007def0
Capabilities:
Hash data using fnv
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x58]
sub rsp, 0x130
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x14050d700]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rsi, rdx
mov rdi, rcx
call fcn.14008b680
mov ecx, dword [rax + 0x50]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14007e340
call fcn.14005fba0
mov eax, dword [rdi + 4]
mov dword [rsp + 0x20], eax
movzx r9d, byte [rdi + 0xd]
movzx r8d, byte [rdi + 0xc]
mov rdx, rsi
call fcn.14005fdc0
mov r14, rax
xor r15d, r15d
mov dword [rbp - 0x4c], r15d
movdqa xmm0, xmmword [0x1404f5350]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x1404f52d0]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmmword [0x1404f5320]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x1404f5370]
movdqa xmmword [rbp - 0x80], xmm1
mov qword [rbp - 0x40], r15
mov ecx, Ordinal_26
call fcn.140131ac0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x38], r15
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], 7
mov qword [rbp - 0x18], 8
mov dword [rbp - 0x50], 0x3f800000
mov r8, rax
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp - 0x38]
call fcn.14005a720
lea rbx, [rsp + 0x50]
nop word [rax + rax]
mov r8, rbx
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.140061510
add rbx, 8
lea rax, [rbp - 0x70]
cmp rbx, rax
jne 0x14007e000
lea r8, [rdi + 0x10]
movzx ecx, byte [r8]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movabs rdx, 0x100000001b3
imul rcx, rdx
movzx eax, byte [r8 + 1]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [r8 + 2]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [r8 + 3]
xor rcx, rax
imul rcx, rdx
mov rdx, qword [rbp - 0x20]
and rdx, rcx
add rdx, rdx
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx + rdx*8 + 8]
cmp rax, qword [rbp - 0x48]
je 0x14007e0a0
mov rdx, qword [rcx + rdx*8]
mov ecx, dword [r8]
cmp ecx, dword [rax + 0x10]
je 0x14007e0a3
nop word [rax + rax]
cmp rax, rdx
je 0x14007e0a0
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x14007e090
jmp 0x14007e0a3
mov rax, r15
test rax, rax
je 0x14007e0be
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.140060ba0
mov rcx, qword [rax]
mov ebx, dword [rcx + 0x14]
jmp 0x14007e0c1
mov ebx, dword [r8]
call fcn.14009a2a0
mov qword [rsp + 0x20], rsi
mov r9d, ebx
mov r8, r14
lea rdx, [rsp + 0x30]
call fcn.14009a330
call fcn.14009a2a0
movsd xmm0, qword [rsp + 0x30]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x48], eax
mov r9, rsi
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
call fcn.14009a640
xorps xmm0, xmm0
movss xmm6, dword [rsp + 0x34]
movss xmm8, dword [rsp + 0x30]
ucomiss xmm8, xmm0
jp 0x14007e129
jne 0x14007e129
ucomiss xmm6, xmm0
jp 0x14007e129
je 0x14007e336
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
cvtps2pd xmm7, xmm6
mov r12d, 1
mov ecx, r12d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2pd xmm1, xmm1
subsd xmm7, xmm1
movsd xmm1, qword [0x1404f4cb0]
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm7, xmm0
cvtps2pd xmm0, xmm8
movd xmm2, ebx
cvtdq2pd xmm2, xmm2
subsd xmm0, xmm2
movsd xmm1, qword [0x1404f4cb0]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm7, xmm0
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm7
xorps xmm1, xmm1
ucomiss xmm1, xmm0
ja 0x14007e1a7
xorps xmm6, xmm6
sqrtss xmm6, xmm0
jmp 0x14007e1af
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
mov rdx, qword [0x1405c0990]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, recv
lea r8, [rbp - 0x70]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r14 + 0x90]
mov qword [rsp + 0x20], r15
mov r9d, recv
lea r8, [rbp - 0x60]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm1, dword [rbp - 0x70]
subss xmm1, dword [rbp - 0x60]
movss xmm2, dword [rbp - 0x6c]
subss xmm2, dword [rbp - 0x5c]
movss xmm0, dword [rbp - 0x68]
subss xmm0, dword [rbp - 0x58]
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
mulss xmm0, xmm0
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14007e239
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14007e241
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
minsd xmm2, qword [0x1404f4ce0]
divsd xmm2, qword [0x1404f4ce0]
movsd xmm1, qword [0x1404f4ca0]
subsd xmm1, xmm2
xorps xmm3, xmm3
maxsd xmm3, xmm1
mulsd xmm3, qword [0x1404f4cd8]
addsd xmm3, qword [0x1404f4c88]
xorps xmm0, xmm0
cvtss2sd xmm0, xmm6
comisd xmm3, xmm0
jbe 0x14007e336
movss xmm0, dword [rdi + 8]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x1404f4d10]
cvttsd2si rax, xmm0
test rax, rax
jle 0x14007e2b5
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x30]
call fcn.14005a8b0
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 2
call qword [sym.imp.USER32.dll_mouse_event]
lea rcx, [rsp + 0x30]
call fcn.14000f700
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rax
movabs rdx, 0x7ffffffffffffc17
cmp rax, rdx
je 0x14007e305
mov ecx, 0xff
cmovge ecx, r12d
test cl, cl
jns 0x14007e305
add rax, 0x3e8
jmp 0x14007e30f
movabs rax, 0x7fffffffffffffff
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x30]
call fcn.14005e6a0
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 4
call qword [sym.imp.USER32.dll_mouse_event]
lea rcx, [rbp - 0x50]
call fcn.140060a10
nop
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.140131aa0
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret