Function at 0x140060310
Capabilities:
Encode data using xor
Hash data using fnv
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
mov rax, qword [0x14050d700]
xor rax, rsp
mov qword [rbp + 0x10], rax
mov rsi, rdx
mov r14, rcx
call fcn.14008b680
mov ecx, dword [rax + 0x44]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400609bf
call fcn.14005fba0
mov eax, dword [r14 + 0x18]
mov dword [rsp + 0x20], eax
movzx r9d, byte [r14 + 0x1d]
movzx r8d, byte [r14 + 0x1c]
mov rdx, rsi
call fcn.14005fdc0
mov r15, rax
xor r12d, r12d
mov dword [rbp - 0x2c], r12d
movdqa xmm0, xmmword [0x1404f5350]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1404f52d0]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [0x1404f5320]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x1404f5370]
movdqa xmmword [rsp + 0x70], xmm1
mov qword [rbp - 0x20], r12
mov ecx, Ordinal_26
call fcn.140131ac0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x18], r12
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x10], xmm0
mov qword [rbp], 7
mov qword [rbp + 8], 8
mov dword [rbp - 0x30], 0x3f800000
mov r8, rax
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp - 0x18]
call fcn.14005a720
lea rbx, [rsp + 0x40]
nop
mov r8, rbx
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x30]
call fcn.140061510
add rbx, 8
lea rax, [rbp - 0x80]
cmp rbx, rax
jne 0x140060430
movzx ecx, byte [r14 + 0x20]
movabs rdi, 0xcbf29ce484222325
xor rcx, rdi
movabs r13, 0x100000001b3
imul rcx, r13
movzx eax, byte [r14 + 0x21]
xor rcx, rax
imul rcx, r13
movzx eax, byte [r14 + 0x22]
xor rcx, rax
imul rcx, r13
movzx eax, byte [r14 + 0x23]
xor rcx, rax
imul rcx, r13
mov r8, qword [rbp]
and r8, rcx
add r8, r8
mov rcx, qword [rbp - 0x18]
mov rax, qword [rcx + r8*8 + 8]
cmp rax, qword [rbp - 0x28]
je 0x1400604c7
mov r8, qword [rcx + r8*8]
mov ecx, dword [r14 + 0x20]
cmp ecx, dword [rax + 0x10]
je 0x1400604ca
cmp rax, r8
je 0x1400604c7
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x1400604b7
jmp 0x1400604ca
mov rax, r12
test rax, rax
je 0x1400604e8
lea r8, [r14 + 0x20]
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x30]
call fcn.140060ba0
mov rcx, qword [rax]
mov ebx, dword [rcx + 0x14]
jmp 0x1400604ec
mov ebx, dword [r14 + 0x20]
call fcn.14009a2a0
mov qword [rsp + 0x20], rsi
mov r9d, ebx
mov r8, r15
lea rdx, [rsp + 0x30]
call fcn.14009a330
call fcn.14007b070
cmp byte [rax + 3], r12b
je 0x140060535
lea r9, [rsp + 0x30]
mov r8, r15
lea rdx, [rbp - 0x70]
call fcn.140060020
movsd xmm6, qword [rax]
movsd qword [rsp + 0x30], xmm6
mov eax, dword [rax + 8]
mov dword [rsp + 0x38], eax
jmp 0x14006053b
movsd xmm6, qword [rsp + 0x30]
movss xmm8, dword [rsp + 0x38]
addss xmm8, dword [0x1404f4bb8]
call fcn.14009a2a0
movsd qword [rbp - 0x70], xmm6
movss dword [rbp - 0x68], xmm8
mov r9, rsi
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x50]
call fcn.14009a640
xorps xmm0, xmm0
movss xmm6, dword [rbp - 0x4c]
movss xmm9, dword [rbp - 0x50]
ucomiss xmm9, xmm0
jp 0x14006058c
jne 0x14006058c
ucomiss xmm6, xmm0
jp 0x14006058c
je 0x1400609b5
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
cvtps2pd xmm7, xmm6
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2pd xmm1, xmm1
subsd xmm7, xmm1
movsd xmm1, qword [0x1404f4cb0]
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm7, xmm0
cvtps2pd xmm0, xmm9
movd xmm2, ebx
cvtdq2pd xmm2, xmm2
subsd xmm0, xmm2
movsd xmm1, qword [0x1404f4cb0]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm7, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm7
ja 0x140060602
xorps xmm10, xmm10
sqrtsd xmm10, xmm7
jmp 0x14006060e
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm10, xmm0
movd xmm1, dword [r14 + 0x10]
cvtdq2pd xmm1, xmm1
divsd xmm1, qword [0x1404f4d00]
mulsd xmm1, qword [0x1404f4cf0]
cvttsd2si ebx, xmm1
movd xmm1, dword [r14 + 4]
cvtdq2pd xmm1, xmm1
comisd xmm1, xmm10
jbe 0x1400608ce
lea rdx, [0x140586588]
cmp qword [reloc.WS2_32.dll_getsockopt], 7
cmova rdx, qword [0x140586588]
mov rax, qword [0x140586598]
lea r9, [rax + rax]
mov rcx, r12
test r9, r9
je 0x140060683
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
xor rdi, rax
imul rdi, r13
inc rcx
cmp rcx, r9
jb 0x140060670
mov r9, rdi
lea r8, [0x140586588]
lea rdx, [rbp - 0x80]
lea rcx, [0x1405b8980]
call fcn.14005fac0
mov rcx, qword [rax + 8]
mov rax, qword [0x1405b8988]
test rcx, rcx
cmovne rax, rcx
mov qword [rbp - 0x50], r12
mov rdx, qword [0x1405bd3f0]
add rdx, qword [rax + 0x58]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp - 0x50]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp - 0x50]
xor eax, eax
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], eax
mov qword [rsp + 0x20], r12
mov r9d, recv
lea r8, [rbp - 0x60]
lea rdx, [rdi + 0x40]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rdi + 0x60]
mov qword [rsp + 0x20], r12
mov r9d, recv
lea r8, [rbp - 0x70]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm9, dword [rbp - 0x70]
movaps xmm1, xmm9
movss xmm6, dword [rsp + 0x30]
subss xmm1, xmm6
movss xmm11, dword [rbp - 0x6c]
movaps xmm2, xmm11
movss xmm7, dword [rsp + 0x34]
subss xmm2, xmm7
movss xmm0, dword [rbp - 0x68]
subss xmm0, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
mulss xmm0, xmm0
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140060775
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14006077d
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
subss xmm6, xmm9
divss xmm6, xmm0
subss xmm7, xmm11
divss xmm7, xmm0
subss xmm8, dword [rbp - 0x68]
divss xmm8, xmm0
movss xmm11, dword [0x1404f4f18]
movss xmm0, dword [0x1404f4f1c]
movss xmm9, dword [0x1404f4e08]
comiss xmm11, xmm7
ja 0x1400607c0
comiss xmm7, xmm9
jbe 0x1400607c3
movaps xmm7, xmm0
movss xmm3, dword [0x1404f4da4]
movss xmm1, dword [0x1404f4f10]
comiss xmm6, xmm3
jbe 0x1400607dd
movaps xmm6, xmm1
jmp 0x1400607e5
comiss xmm1, xmm6
jbe 0x1400607e5
movaps xmm6, xmm3
movss xmm2, dword [rbp - 0x60]
subss xmm6, xmm2
movss xmm4, dword [rbp - 0x5c]
subss xmm7, xmm4
movss xmm5, dword [rbp - 0x58]
subss xmm8, xmm5
comiss xmm11, xmm7
ja 0x140060810
comiss xmm7, xmm9
jbe 0x140060813
nop dword [rax]
movaps xmm7, xmm0
comiss xmm6, xmm3
jbe 0x14006081d
movaps xmm6, xmm1
jmp 0x140060825
comiss xmm1, xmm6
jbe 0x140060825
movaps xmm6, xmm3
test ebx, ebx
je 0x14006083d
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
divss xmm7, xmm0
divss xmm8, xmm0
addss xmm2, xmm6
movss dword [rbp - 0x48], xmm2
addss xmm4, xmm7
movss dword [rbp - 0x44], xmm4
addss xmm5, xmm8
movss dword [rbp - 0x40], xmm5
comiss xmm11, xmm4
ja 0x140060870
comiss xmm4, xmm9
jbe 0x140060877
nop word [rax + rax]
mov dword [rbp - 0x44], 0xc3b40000
comiss xmm2, xmm3
jbe 0x140060885
mov dword [rbp - 0x48], 0xc2b20000
jmp 0x140060891
comiss xmm1, xmm2
jbe 0x140060891
mov dword [rbp - 0x48], 0x42b20000
mov qword [rsp + 0x20], r12
mov r9d, recv
lea r8, [rbp - 0x48]
lea rdx, [rdi + 0x40]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [rdi + 0x3d0]
mov qword [rsp + 0x20], r12
mov r9d, recv
lea r8, [rbp - 0x48]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x1405bd3f8], r12b
je 0x1400609b5
mov rdx, qword [0x1405c0990]
add rdx, 0x90
mov qword [rsp + 0x20], r12
mov r9d, recv
lea r8, [rbp - 0x70]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r15 + 0x90]
mov qword [rsp + 0x20], r12
mov r9d, recv
lea r8, [rbp - 0x60]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm1, dword [rbp - 0x70]
subss xmm1, dword [rbp - 0x60]
movss xmm2, dword [rbp - 0x6c]
subss xmm2, dword [rbp - 0x5c]
movss xmm0, dword [rbp - 0x68]
subss xmm0, dword [rbp - 0x58]
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
mulss xmm0, xmm0
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140060965
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14006096d
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
minsd xmm2, qword [0x1404f4ce0]
divsd xmm2, qword [0x1404f4ce0]
movsd xmm1, qword [0x1404f4ca0]
subsd xmm1, xmm2
xorps xmm0, xmm0
maxsd xmm0, xmm1
mulsd xmm0, qword [0x1404f4cd8]
addsd xmm0, qword [0x1404f4c88]
comisd xmm0, xmm10
jbe 0x1400609b5
mov byte [0x1405bd3fa], 1
lea rcx, [rbp - 0x30]
call fcn.140060a10
nop
mov rcx, qword [rbp + 0x10]
xor rcx, rsp
call fcn.140131aa0
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret