Function at 0x1400400b0
Capabilities:
Encode data using xor
Hash data with crc32
Log keystrokes via polling

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400400df
cmp byte [reloc.WS2_32.dll_accept], 0
sete al
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x1400400e6
movzx eax, byte [reloc.WS2_32.dll_accept]
test al, al
je 0x140040661
movzx ecx, word [0x1400c8c18]
xor edx, edx
mov eax, dword [str.nip_]
mov dword [rbp - 0x29], eax
movzx eax, byte [0x1400c8c1a]
xor byte [rbp - 0x28], 0x3a
lea r8d, [rdx + 0x22]
xor byte [rbp - 0x27], 0x3b
xor al, 0x3f
xor byte [rbp - 0x26], 0x3c
mov word [rbp - 0x25], cx
xor cl, 0x3d
xor byte [rbp - 0x24], 0x3e
mov qword [rsp + 0xc0], rbx
mov byte [rbp - 0x25], cl
lea rcx, [rbp - 0x29]
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0x98], rdi
mov qword [rsp + 0x90], r14
mov byte [rbp - 0x29], 0x57
mov byte [rbp - 0x23], al
call fcn.140017570
movzx eax, byte [rbp - 0x23]
movzx r8d, byte [rbp - 0x29]
mov dword [rbp + 0x6f], 0x43af0000
mov dword [rbp + 0x73], 0x43960000
test al, al
je 0x140040193
xor byte [rbp - 0x28], 0x3a
xor r8b, 0x39
xor byte [rbp - 0x27], 0x3b
xor byte [rbp - 0x26], 0x3c
xor byte [rbp - 0x25], 0x3d
xor byte [rbp - 0x24], 0x3e
xor al, 0x3f
mov byte [rbp - 0x29], r8b
mov byte [rbp - 0x23], al
lea r9, [rbp - 0x28]
mov r10d, 0xffffffff
mov ecx, r10d
test r8b, r8b
je 0x1400401e0
lea r11, [0x1400bbc80]
nop dword [rax]
cmp r8b, 0x23
jne 0x1400401c3
cmp byte [r9], r8b
jne 0x1400401c3
cmp byte [r9 + 1], r8b
cmove ecx, r10d
movzx edx, cl
movzx eax, r8b
movzx r8d, byte [r9]
xor rdx, rax
shr ecx, 8
inc r9
xor ecx, dword [r11 + rdx*4]
test r8b, r8b
jne 0x1400401b0
not ecx
call fcn.140014f30
test rax, rax
je 0x1400401fb
xor r8d, r8d
lea rdx, [rbp + 0x6f]
mov rcx, rax
call fcn.140019f10
mov rcx, qword [0x1400da3a0]
mov rax, qword [rcx + 0x3ea8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea8]
cmp byte [rax + 0x9b], 0
jne 0x140040239
movss xmm1, dword [0x1400c91ec]
lea rcx, [rbp + 0x6f]
mov qword [rbp + 0x6f], 0
call fcn.14001ab10
mov eax, dword [str.UC_3]
mov esi, 4
mov edi, dword [reloc.WS2_32.dll_accept]
xor ebx, ebx
cmp byte [reloc.WLDAP32.dll_Ordinal_60], bl
mov dword [rbp + 0x67], eax
lea r14d, [rsi + 0x1b]
je 0x140040330
cmp edi, 2
jl 0x1400402ec
movdqa xmm3, xmmword [0x1400c9290]
movdqa xmm2, xmm3
movdqa xmm0, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400c93a0]
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400c93a0]
shufps xmm2, xmm0, 0xdd
movd xmm0, esi
psrad xmm2, xmm0
movd xmm0, r14d
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400c92b0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400c92d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.9999999999999999]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x67], xmm2
jmp 0x140040330
lea r9, [rbp + 0x67]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x39
xor byte [r9 - 1], al
cmp r8d, esi
jl 0x140040300
lea rdx, [0x1400d90d2]
lea rcx, [rbp + 0x67]
call fcn.140037240
cmp byte [reloc.WS2_32.dll_accept], bl
mov eax, dword [0x1400c8c40]
movsd xmm0, qword [str.zUIRXLZ_a]
mov dword [rbp + 0x27], eax
movzx eax, byte [0x1400c8c44]
mov byte [rbp + 0x2b], al
movsd qword [rbp + 0x1f], xmm0
je 0x14004036e
mov byte [0x1400da399], bl
cmp edi, 2
mov rdi, qword [rsp + 0x98]
jl 0x14004048c
movdqa xmm2, xmmword [0x1400c9290]
mov ebx, 8
movdqa xmm4, xmmword [0x1400c93a0]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x1400c92a0]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
movaps xmmword [rsp + 0x80], xmm6
movd xmm6, esi
movd xmm5, r14d
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400c92b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [str.zUIRXLZ_a]
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400c92d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.9999999999999999]
xorps xmm2, xmm0
punpckldq xmm1, xmm3
movd dword [rbp + 0x1f], xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movaps xmm6, xmmword [rsp + 0x80]
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400c92b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [rbp + 0x23]
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400c92d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.9999999999999999]
xorps xmm2, xmm0
movd dword [rbp + 0x23], xmm2
mov r14, qword [rsp + 0x90]
lea r8, [rbp + 0x1f]
mov rsi, qword [rsp + 0xc8]
movsxd rax, ebx
add r8, rax
nop word [rax + rax]
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, bl
inc ebx
sub al, cl
add al, 0x39
xor byte [r8 - 1], al
cmp ebx, 0xd
jl 0x1400404b0
mov rbx, qword [rsp + 0xc0]
lea rdx, [0x1400da399]
lea rcx, [rbp + 0x1f]
call fcn.140037240
cmp byte [0x1400da399], 0
je 0x140040505
mov byte [reloc.WS2_32.dll_accept], 0
cmp byte [0x1400c8d41], 0
lea rdx, [0x1400d90d1]
movsd xmm0, qword [str.jTZLQWQ_2B]
lea rcx, [rbp - 0x11]
movzx eax, word [0x1400c8d40]
movsd qword [rbp - 0x11], xmm0
mov word [rbp - 9], ax
je 0x140040559
xor byte [rbp - 0x10], 0x3a
xor byte [rbp - 0xf], 0x3b
xor byte [rbp - 0xe], 0x3c
xor byte [rbp - 0xd], 0x3d
xor byte [rbp - 0xc], 0x3e
xor byte [rbp - 0xb], 0x3f
xor byte [rbp - 0xa], 0x40
xor byte [rbp - 9], 0x41
xor byte [rbp - 8], 0x42
mov byte [rbp - 0x11], 0x53
call fcn.140037240
movzx eax, byte [0x1400c8cb0]
lea rdx, [0x1400d90d0]
movsd xmm0, qword [0x1400c8ca8]
lea rcx, [rbp - 0x21]
movsd qword [rbp - 0x21], xmm0
xor al, 0x41
xor byte [rbp - 0x20], 0x3a
xor byte [rbp - 0x1f], 0x3b
xor byte [rbp - 0x1e], 0x3c
xor byte [rbp - 0x1d], 0x3d
xor byte [rbp - 0x1c], 0x3e
xor byte [rbp - 0x1b], 0x3f
xor byte [rbp - 0x1a], 0x40
mov byte [rbp - 0x19], al
mov byte [rbp - 0x21], 0x44
call fcn.140037240
cmp byte [0x1400c8c01], 0
lea rdx, [0x1400d90d3]
movsd xmm0, qword [str.q_ZPIV__3B]
lea rcx, [rbp - 1]
movzx eax, word [0x1400c8c00]
movsd qword [rbp - 1], xmm0
mov word [rbp + 7], ax
je 0x1400405fb
xor byte [rbp], 0x3a
xor byte [rbp + 1], 0x3b
xor byte [rbp + 2], 0x3c
xor byte [rbp + 3], 0x3d
xor byte [rbp + 4], 0x3e
xor byte [rbp + 5], 0x3f
xor byte [rbp + 6], 0x40
xor byte [rbp + 7], 0x41
xor byte [rbp + 8], 0x42
mov byte [rbp - 1], 0x48
call fcn.140037240
movzx eax, word [0x1400c8ce8]
lea rdx, [0x1400da39b]
movsd xmm0, qword [str.m_ZQ]
lea rcx, [rbp + 0xf]
movsd qword [rbp + 0xf], xmm0
xor byte [rbp + 0x10], 0x3a
xor byte [rbp + 0x11], 0x3b
xor byte [rbp + 0x12], 0x3c
xor byte [rbp + 0x13], 0x3d
xor byte [rbp + 0x14], 0x3e
xor byte [rbp + 0x15], 0x3f
xor byte [rbp + 0x16], 0x40
mov word [rbp + 0x17], ax
movzx eax, byte [0x1400c8cea]
xor byte [rbp + 0x17], 0x41
xor al, 0x43
xor byte [rbp + 0x18], 0x42
mov byte [rbp + 0x19], al
mov byte [rbp + 0xf], 0x54
call fcn.140037240
call fcn.140019930
add rsp, 0xa0
pop rbp
ret