Function at 0x1400343c0
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
movaps xmmword [rsp + 0xa0], xmm6
mov rax, qword [0x14004a040]
xor rax, rsp
mov qword [rbp + 0x37], rax
cmp qword [0x14004b298], 0
jne 0x1400343f7
call fcn.1400280e0
call fcn.1400284e0
call fcn.140007300
mov rcx, qword [0x14004ace8]
lea rdx, [rbp + 0x27]
xorps xmm0, xmm0
movups xmmword [rbp + 0x27], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x140034449
mov eax, dword [rbp + 0x2f]
sub eax, dword [rbp + 0x27]
movd xmm1, eax
mov eax, dword [rbp + 0x33]
sub eax, dword [rbp + 0x2b]
cvtdq2ps xmm1, xmm1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [0x14004b274], xmm1
movss dword [0x14004b270], xmm2
jmp 0x140034459
movss xmm1, dword [0x14004b274]
movss xmm2, dword [0x14004b270]
mulss xmm1, dword [0x140042d20]
mov ecx, 0x2d
mulss xmm2, dword [0x140042d20]
movss dword [0x14004ad3c], xmm1
movss dword [0x14004ad2c], xmm2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140034496
cmp byte [0x14004accf], 0
sete byte [0x14004accf]
call fcn.140033590
movss xmm6, dword [0x140042d44]
xor ebx, ebx
cmp byte [0x14004accf], bl
je 0x140034a1b
lea rcx, [0x14004b740]
call qword [sym.imp.USER32.dll_GetCursorPos]
movaps xmm0, xmmword [0x140042ef0]
lea rcx, [rbp - 9]
movd xmm1, dword [0x14004b744]
movups xmmword [rbp - 9], xmm0
movd xmm0, dword [0x14004b740]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x19], xmm0
movss dword [rbp - 0x15], xmm1
call fcn.140003dd0
mov rcx, qword [0x14004acd0]
lea rdx, [rbp - 0x19]
movss xmm2, dword [0x140042da0]
add rcx, 0x1cc8
mov r9d, eax
mov dword [rsp + 0x20], 0xc
call fcn.140022750
movdqa xmm0, xmmword [0x140042f20]
xor eax, eax
movdqu xmmword [rbp - 9], xmm0
mov byte [rbp + 0x11], al
mov edx, ebx
mov dword [rbp + 7], 0x9d86b0d1
mov dword [rbp + 0xb], 0xd8cd9299
mov word [rbp + 0xf], 0xb4bf
nop dword [rax]
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 9], al
cmp edx, 0x1a
jb 0x140034550
xor edx, edx
mov byte [rbp + 0x11], bl
mov r8d, 0x212a
lea rcx, [rbp - 9]
call fcn.14000b460
test al, al
je 0x1400345c2
mov rcx, qword [0x14004acd0]
lea rdx, [0x14003a89e]
mov dword [rbp - 0x19], 0x43c30000
mov dword [rbp - 0x15], 0x43c00000
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rcx, qword [rcx + 0x19f8]
call fcn.140005b90
mov edx, eax
mov dword [rsp + 0x20], ebx
lea r8, [rbp - 0x19]
lea rcx, [0x14003a89e]
call fcn.140009800
mov rcx, qword [0x14004acd0]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
mov rcx, qword [rax + 0x1d8]
test rcx, rcx
je 0x1400345f8
cmp dword [rcx + 0x10], 2
jne 0x1400345f3
cmp dword [rcx + 4], 1
je 0x140034603
call fcn.140014b90
mov r8d, 1
call fcn.1400145d0
movss xmm1, dword [0x140042df8]
mov ecx, 1
call fcn.1400140a0
call fcn.14002b5e0
lea rcx, str.___Aim_bot
call fcn.1400291e0
call fcn.14002b5e0
mov edx, ebx
mov dword [rbp - 0x19], 0x97968dac
mov dword [rbp - 0x15], 0x8186c680
mov word [rbp - 0x11], 0x84
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 0x19], al
cmp edx, 9
jb 0x140034641
lea rdx, [0x14004acdd]
mov byte [rbp - 0x10], bl
lea rcx, [rbp - 0x19]
call fcn.14002a5f0
mov edx, ebx
mov dword [rbp - 0x19], 0x8b8c8fb2
mov dword [rbp - 0x15], 0x868e8e91
mov word [rbp - 0x11], 0x8e
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 0x19], al
cmp edx, 9
jb 0x140034680
lea rax, [rbp + 0x17]
movss dword [rsp + 0x30], xmm6
lea r9, [rbp + 0x1f]
mov qword [rsp + 0x20], rax
lea r8, [0x14004a0d4]
mov byte [rbp - 0x10], bl
lea rcx, [rbp - 0x19]
mov dword [rbp + 0x17], 0x42c80000
mov dword [rbp + 0x1f], 0x3f800000
call fcn.14002bc80
xor eax, eax
mov dword [rbp - 0x19], 0x938290a5
mov byte [rbp - 0x11], al
mov edx, ebx
mov dword [rbp - 0x15], 0x9e88a0c5
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 0x19], al
cmp edx, 8
jb 0x1400346e0
lea rdx, [0x14004accb]
mov byte [rbp - 0x11], bl
lea rcx, [rbp - 0x19]
call fcn.14002a5f0
mov edx, ebx
mov dword [rbp - 0x19], 0xc48e8ba0
mov dword [rbp - 0x15], 0x9189a3
nop dword [rax]
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 0x19], al
cmp edx, 7
jb 0x140034720
lea rax, [rbp + 0x1f]
movss dword [rsp + 0x30], xmm6
lea r9, [rbp + 0x17]
mov qword [rsp + 0x20], rax
lea r8, [0x14004a0d0]
mov byte [rbp - 0x12], bl
lea rcx, [rbp - 0x19]
mov dword [rbp + 0x1f], 0x441b0000
mov dword [rbp + 0x17], 0x41200000
call fcn.14002bc80
mov edx, ebx
mov dword [rbp - 0x19], 0xc48e8ba0
mov dword [rbp - 0x15], 0xd29e83ae
mov word [rbp - 0x11], 0xc9
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 0x19], al
cmp edx, 9
jb 0x140034780
lea rcx, [rbp - 0x19]
mov byte [rbp - 0x10], bl
call fcn.1400291e0
movss xmm1, dword [0x140042e28]
movss xmm0, dword [0x140042de4]
call fcn.14000f8d0
call fcn.140032f70
call fcn.140013df0
call fcn.14002b5e0
lea rcx, str.___Visuals
call fcn.1400291e0
call fcn.14002b5e0
mov edx, ebx
mov dword [rbp - 0x19], 0xc49b8da3
mov dword [rbp - 0x15], 0x9795a0
nop dword [rax]
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 0x19], al
cmp edx, 7
jb 0x1400347f0
lea rdx, [0x14004acce]
mov byte [rbp - 0x12], bl
lea rcx, [rbp - 0x19]
call fcn.14002a5f0
mov edx, ebx
mov dword [rbp - 0x19], 0x8a918da2
mov dword [rbp - 0x15], 0x87a59480
mov dword [rbp - 0x11], 0x9faeca91
mov word [rbp - 0xd], 0x9d
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 0x19], al
cmp edx, 0xd
jb 0x140034831
lea rdx, [0x14004acca]
mov byte [rbp - 0xc], bl
lea rcx, [rbp - 0x19]
call fcn.14002a5f0
mov edx, ebx
mov dword [rbp - 0x19], 0x94828cb2
mov dword [rbp - 0x15], 0x8d898f89
mov word [rbp - 0x11], 0x9a
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 0x19], al
cmp edx, 9
jb 0x140034870
lea rdx, [0x14004accc]
mov byte [rbp - 0x10], bl
lea rcx, [rbp - 0x19]
call fcn.14002a5f0
xor eax, eax
mov dword [rbp - 0x19], 0x808287a9
mov byte [rbp - 0x11], al
mov edx, ebx
mov dword [rbp - 0x15], 0x9894a3c5
nop dword [rax]
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 0x19], al
cmp edx, 8
jb 0x1400348b0
lea rdx, [0x14004acc9]
mov byte [rbp - 0x11], bl
lea rcx, [rbp - 0x19]
call fcn.14002a5f0
xor eax, eax
mov dword [rbp - 0x19], 0x90908ba5
mov byte [rbp - 0x11], al
mov edx, ebx
mov dword [rbp - 0x15], 0x8d848884
nop dword [rax]
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 0x19], al
cmp edx, 8
jb 0x1400348f0
lea rdx, [0x14004acdf]
mov byte [rbp - 0x11], bl
lea rcx, [rbp - 0x19]
call fcn.14002a5f0
call fcn.140013df0
call fcn.14002b5e0
lea rcx, str.___Exploits
call fcn.1400291e0
call fcn.14002b5e0
xor eax, eax
mov dword [rbp - 0x19], 0x90908ca8
mov byte [rbp - 0xb], al
mov edx, ebx
mov dword [rbp - 0x15], 0xc8938884
mov dword [rbp - 0x11], 0x859d8fbb
mov word [rbp - 0xd], 0x8b9b
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 0x19], al
cmp edx, 0xe
jb 0x140034951
lea rdx, [0x14004acdc]
mov byte [rbp - 0xb], bl
lea rcx, [rbp - 0x19]
call fcn.14002a5f0
movdqa xmm0, xmmword [0x140042f40]
mov edx, ebx
movdqu xmmword [rbp - 9], xmm0
mov word [rbp + 7], 0x96
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 9], al
cmp edx, 0x11
jb 0x140034990
lea rdx, [0x14004acde]
mov byte [rbp + 8], bl
lea rcx, [rbp - 9]
call fcn.14002a5f0
mov edx, ebx
mov dword [rbp - 0x19], 0xc4918ba0
mov dword [rbp - 0x15], 0x8b9292b6
mov word [rbp - 0x11], 0x82
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x1f]
inc edx
xor byte [rbp + rcx - 0x19], al
cmp edx, 9
jb 0x1400349d0
lea rdx, [0x14004accd]
mov byte [rbp - 0x10], bl
lea rcx, [rbp - 0x19]
call fcn.14002a5f0
call fcn.14002b5e0
lea rcx, str.RCE_PHPUNIT_EXPLOITS_are_still_primitives_in_2021.
call fcn.1400291e0
lea rcx, str.__proaids
call fcn.1400291e0
call fcn.14002b5e0
call fcn.14000e370
call fcn.140008ae0
mov rcx, qword [0x14004adb8]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x14004adb8]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x14004adb8]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x14004adb8]
mov r9d, 1
mov dword [rsp + 0x30], ebx
xor r8d, r8d
movss dword [rsp + 0x28], xmm6
xor edx, edx
mov dword [rsp + 0x20], ebx
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x14004adb8]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140034ad1
call fcn.1400090a0
mov rcx, qword [0x14004acd0]
add rcx, 0x1c70
cmp byte [rcx], bl
cmove rcx, rbx
call fcn.1400277f0
mov rcx, qword [0x14004adb8]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14004adb8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140034b2a
mov rcx, qword [0x14004adb8]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140034b2a
call fcn.140028280
mov rcx, qword [0x14004adb8]
lea rdx, [0x14004ad70]
mov rax, qword [rcx]
call qword [rax + 0x80]
call fcn.1400280e0
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140037ac0
mov rbx, qword [rsp + 0xc0]
movaps xmm6, xmmword [rsp + 0xa0]
add rsp, 0xb0
pop rbp
ret