Function at 0x14005af20
Capabilities:
Hash data using fnv
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
mov rax, qword [0x140081040]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov r14, rdx
mov rdi, rcx
mov r13d, 4
mov rax, qword gs:[0x58]
mov r8, qword [rax]
mov eax, dword [r13 + r8]
cmp dword [0x1400a9f98], eax
jle 0x14005afde
lea rcx, [0x1400a9f98]
call fcn.14006ba10
cmp dword [0x1400a9f98], 0xffffffff
jne 0x14005afde
movdqa xmm0, xmmword [0x140077780]
movdqa xmmword [0x1400a9f50], xmm0
movdqa xmm1, xmmword [0x140077b20]
movdqa xmmword [0x1400a9f60], xmm1
mov dword [0x1400a9f70], 4
lea rcx, [0x1400a9f98]
call fcn.14006b9a4
mov ecx, dword [0x1400a9f78]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14005b595
mov eax, dword [rdi + 0x14]
mov dword [rsp + 0x20], eax
movzx r9d, byte [rdi + 0x19]
movzx r8d, byte [rdi + 0x18]
mov rdx, r14
call fcn.1400546c0
mov r15, rax
xor r12d, r12d
mov dword [rbp - 0x4c], r12d
movdqa xmm0, xmmword [0x140077ae0]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x140077a70]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x140077ab0]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x140077b00]
movdqa xmmword [rsp + 0x70], xmm1
mov qword [rbp - 0x40], r12
lea ecx, [r12 + 0x18]
call fcn.14006be44
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x38], r12
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], 7
mov qword [rbp - 0x18], 8
movss xmm7, dword [0x1400774bc]
mov dword [rbp - 0x50], 0x3f800000
mov r8, rax
lea edx, [r12 + 0x10]
lea rcx, [rbp - 0x38]
call fcn.1400526b0
lea rbx, [rsp + 0x40]
nop dword [rax + rax]
mov r8, rbx
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400556c0
add rbx, 8
lea rax, [rbp - 0x80]
cmp rbx, rax
jne 0x14005b0b0
lea r8, [rdi + 0x1c]
movzx ecx, byte [r8]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movabs rdx, 0x100000001b3
imul rcx, rdx
movzx eax, byte [r8 + 1]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [r8 + 2]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [r8 + 3]
xor rcx, rax
imul rcx, rdx
mov rdx, qword [rbp - 0x20]
and rdx, rcx
add rdx, rdx
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx + rdx*8 + 8]
cmp rax, qword [rbp - 0x48]
je 0x14005b150
mov rdx, qword [rcx + rdx*8]
mov ecx, dword [r8]
cmp ecx, dword [rax + 0x10]
je 0x14005b153
nop word [rax + rax]
cmp rax, rdx
je 0x14005b150
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x14005b140
jmp 0x14005b153
mov rax, r12
test rax, rax
je 0x14005b16e
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.140055240
mov rcx, qword [rax]
mov ebx, dword [rcx + 0x14]
jmp 0x14005b171
mov ebx, dword [r8]
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov eax, dword [r13 + rsi]
cmp dword [0x1400aa0f8], eax
jle 0x14005b1dc
lea rcx, [0x1400aa0f8]
call fcn.14006ba10
cmp dword [0x1400aa0f8], 0xffffffff
jne 0x14005b1dc
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x1400aa100], xmm0
movss dword [0x1400aa104], xmm6
lea rcx, [0x1400aa0f8]
call fcn.14006b9a4
mov qword [rsp + 0x20], r14
mov r9d, ebx
mov r8, r15
lea rdx, [rbp - 0x68]
call fcn.14005c090
mov ecx, dword [r13 + rsi]
cmp dword [0x1400aa0f8], ecx
jle 0x14005b24f
lea rcx, [0x1400aa0f8]
call fcn.14006ba10
cmp dword [0x1400aa0f8], 0xffffffff
jne 0x14005b24f
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x1400aa100], xmm0
movss dword [0x1400aa104], xmm6
lea rcx, [0x1400aa0f8]
call fcn.14006b9a4
movsd xmm0, qword [rbp - 0x68]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [rbp - 0x60]
mov dword [rsp + 0x38], eax
mov r9, r14
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x78]
call fcn.14005c250
xorps xmm9, xmm9
movss xmm10, dword [rbp - 0x74]
movss xmm11, dword [rbp - 0x78]
ucomiss xmm11, xmm9
jp 0x14005b296
jne 0x14005b296
ucomiss xmm10, xmm9
jp 0x14005b296
je 0x14005b58b
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov esi, eax
cvtps2pd xmm0, xmm10
movd xmm1, eax
cvtdq2pd xmm1, xmm1
subsd xmm0, xmm1
movsd xmm1, qword [0x140077560]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm8, xmm0
cvtps2pd xmm0, xmm11
movd xmm2, ebx
cvtdq2pd xmm2, xmm2
subsd xmm0, xmm2
movsd xmm1, qword [0x140077560]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm8, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm8
ja 0x14005b30e
xorps xmm6, xmm6
sqrtsd xmm6, xmm8
jmp 0x14005b31a
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm6, xmm0
movd xmm8, ebx
cvtdq2ps xmm8, xmm8
movaps xmm5, xmm7
subss xmm11, xmm8
cmp byte [rdi + 2], r12b
je 0x14005b3ca
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [rdi + 8]
movss dword [rbp - 0x78], xmm1
mov dword [rbp - 0x80], r12d
lea rax, [rbp - 0x80]
lea rcx, [rbp - 0x78]
comiss xmm9, xmm1
cmovbe rax, rcx
movss xmm4, dword [0x140077648]
movaps xmm0, xmm4
minss xmm0, dword [rax]
divss xmm0, xmm4
movss xmm3, dword [0x1400776a4]
mulss xmm0, xmm3
subss xmm0, xmm3
divss xmm0, dword [0x140077654]
subss xmm5, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [rdi + 0xc]
movss dword [rbp - 0x80], xmm0
mov dword [rbp - 0x78], r12d
lea rax, [rbp - 0x78]
lea rcx, [rbp - 0x80]
comiss xmm9, xmm0
cmovbe rax, rcx
movaps xmm1, xmm4
minss xmm1, dword [rax]
divss xmm1, xmm4
mulss xmm1, xmm3
subss xmm1, xmm3
divss xmm1, dword [0x140077654]
subss xmm7, xmm1
jmp 0x14005b44e
xorps xmm4, xmm4
cvtsi2ss xmm4, dword [rdi + 0x10]
movss dword [rbp - 0x80], xmm4
mov dword [rbp - 0x78], r12d
lea rax, [rbp - 0x78]
lea rcx, [rbp - 0x80]
comiss xmm9, xmm4
cmovbe rax, rcx
movss xmm3, dword [0x140077648]
movaps xmm0, xmm3
minss xmm0, dword [rax]
divss xmm0, xmm3
movss xmm2, dword [0x1400776a4]
mulss xmm0, xmm2
subss xmm0, xmm2
divss xmm0, dword [0x140077654]
subss xmm5, xmm0
movss dword [rbp - 0x80], xmm4
mov dword [rbp - 0x78], r12d
lea rax, [rbp - 0x78]
lea rcx, [rbp - 0x80]
cmovbe rax, rcx
movaps xmm0, xmm3
minss xmm0, dword [rax]
divss xmm0, xmm3
mulss xmm0, xmm2
subss xmm0, xmm2
divss xmm0, dword [0x140077654]
subss xmm7, xmm0
mulss xmm5, xmm11
xorps xmm11, xmm11
cvtsi2ss xmm11, esi
subss xmm10, xmm11
mulss xmm7, xmm10
addss xmm7, xmm11
addss xmm5, xmm8
movd xmm0, dword [rdi + 4]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm6
jbe 0x14005b4a5
subss xmm7, xmm11
cvttss2si r8, xmm7
subss xmm5, xmm8
cvttss2si rdx, xmm5
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
cmp byte [0x1400a8b1d], r12b
je 0x14005b58b
mov rdx, qword [0x1400aa0f0]
add rdx, 0x90
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp - 0x78]
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r15 + 0x90]
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp - 0x68]
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm1, dword [rbp - 0x78]
subss xmm1, dword [rbp - 0x68]
movss xmm2, dword [rbp - 0x74]
subss xmm2, dword [rbp - 0x64]
movss xmm0, dword [rbp - 0x70]
subss xmm0, dword [rbp - 0x60]
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
mulss xmm0, xmm0
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14005b53c
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14005b544
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
minsd xmm2, qword [0x140077588]
divsd xmm2, qword [0x140077588]
movsd xmm1, qword [0x140077548]
subsd xmm1, xmm2
xorps xmm0, xmm0
maxsd xmm0, xmm1
mulsd xmm0, qword [0x140077580]
addsd xmm0, qword [0x140077530]
comisd xmm0, xmm6
jbe 0x14005b58b
mov byte [0x1400a8b1e], 1
lea rcx, [rbp - 0x50]
call fcn.140052250
nop
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14006b800
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret