Function at 0x140006390
Capabilities:
Encode data using xor
Execute command
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x47]
sub rsp, 0xd0
mov ecx, 1
call fcn.140006fd4
lea rcx, str.color_E
mov qword [rbp + 0x67], rax
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140006c40
xor esi, esi
mov edi, 0x133
nop dword [rax + rax]
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1400063e0
mov ecx, 0x46
xor edx, edx
call fcn.1400016a0
lea ecx, [rdx + 0x6f]
mov word [rbp - 0x41], ax
lea edx, [rcx - 0x6e]
movzx r8d, ax
call fcn.1400016a0
lea ecx, [rdx + 0x71]
mov word [rbp - 0x3f], ax
lea edx, [rcx - 0x70]
call fcn.1400016a0
lea ecx, [rdx + 0x72]
mov word [rbp - 0x3d], ax
lea edx, [rcx - 0x71]
call fcn.1400016a0
lea ecx, [rdx + 0x6b]
mov word [rbp - 0x3b], ax
lea edx, [rcx - 0x6a]
call fcn.1400016a0
lea ecx, [rdx + 0x65]
mov word [rbp - 0x39], ax
lea edx, [rcx - 0x64]
call fcn.1400016a0
lea ecx, [rdx + 0x6f]
mov word [rbp - 0x37], ax
lea edx, [rcx - 0x6e]
call fcn.1400016a0
lea ecx, [rdx + 0x5f]
mov word [rbp - 0x35], ax
lea edx, [rcx - 0x5e]
call fcn.1400016a0
lea ecx, [rdx + 0x3c]
mov word [rbp - 0x33], ax
lea edx, [rcx - 0x3b]
call fcn.1400016a0
lea ecx, [rdx + 0x64]
mov word [rbp - 0x31], ax
lea edx, [rcx - 0x63]
call fcn.1400016a0
lea ecx, [rdx + 0x60]
mov word [rbp - 0x2f], ax
lea edx, [rcx - 0x5f]
call fcn.1400016a0
lea ecx, [rdx + 0x5b]
mov word [rbp - 0x2d], ax
lea edx, [rcx - 0x5a]
call fcn.1400016a0
lea ecx, [rdx + 0x63]
mov word [rbp - 0x2b], ax
lea edx, [rcx - 0x62]
call fcn.1400016a0
lea ecx, [rdx + 0x68]
mov word [rbp - 0x29], ax
lea edx, [rcx - 0x67]
call fcn.1400016a0
lea ecx, [rdx + 0x20]
mov word [rbp - 0x27], ax
lea edx, [rcx - 0x1f]
call fcn.1400016a0
lea ecx, [rdx + 0x49]
mov word [rbp - 0x25], ax
lea edx, [rcx - 0x48]
call fcn.1400016a0
lea ecx, [rdx + 0x5a]
mov word [rbp - 0x23], ax
lea edx, [rcx - 0x59]
call fcn.1400016a0
lea ecx, [rdx + 0x5e]
mov word [rbp - 0x21], ax
lea edx, [rcx - 0x5d]
call fcn.1400016a0
lea ecx, [rdx + 0x25]
mov word [rbp - 0x1f], ax
lea edx, [rcx - 0x24]
call fcn.1400016a0
lea ecx, [rdx + 0x22]
mov word [rbp - 0x1d], ax
lea edx, [rcx - 0x21]
call fcn.1400016a0
mov word [rbp - 0x1b], ax
lea ecx, [rdx + 0x1a]
lea edx, [rcx - 0x19]
call fcn.1400016a0
lea ecx, [rdx + 0x3f]
mov word [rbp - 0x19], ax
lea edx, [rcx - 0x3e]
call fcn.1400016a0
lea ecx, [rdx + 0x53]
mov word [rbp - 0x17], ax
lea edx, [rcx - 0x52]
call fcn.1400016a0
lea ecx, [rdx + 0x53]
mov word [rbp - 0x15], ax
lea edx, [rcx - 0x52]
call fcn.1400016a0
lea ecx, [rdx + 0x59]
mov word [rbp - 0x13], ax
lea edx, [rcx - 0x58]
call fcn.1400016a0
lea edx, [rcx - 0x57]
mov word [rbp - 0x11], ax
call fcn.1400016a0
lea ecx, [rdx + 0x50]
mov word [rbp - 0xf], ax
lea edx, [rcx - 0x4f]
call fcn.1400016a0
lea ecx, [rdx + 0x54]
mov word [rbp - 0xd], ax
lea edx, [rcx - 0x53]
call fcn.1400016a0
lea ecx, [rdx + 0x4c]
mov word [rbp - 0xb], ax
lea edx, [rcx - 0x4b]
call fcn.1400016a0
lea ecx, [rdx + 0x12]
mov word [rbp - 9], ax
lea edx, [rcx - 0x11]
call fcn.1400016a0
lea ecx, [rdx + 0x48]
mov word [rbp - 7], ax
lea edx, [rcx - 0x47]
call fcn.1400016a0
lea ecx, [rdx + 0x5a]
mov word [rbp - 5], ax
lea edx, [rcx - 0x59]
call fcn.1400016a0
lea ecx, [rdx + 0x46]
mov word [rbp - 3], ax
lea edx, [rcx - 0x45]
call fcn.1400016a0
xor ecx, ecx
mov word [rbp - 1], ax
lea edx, [rcx + 0x21]
call fcn.1400016a0
lea edx, [rcx + 0x22]
mov word [rbp + 1], ax
movzx ecx, word [0x140008734]
call fcn.1400016a0
movzx ecx, word [0x140008736]
mov edx, 0x23
mov word [rbp + 3], ax
call fcn.1400016a0
movzx ecx, word [str.Flexy.dll]
mov edx, 0x24
mov word [rbp + 5], ax
call fcn.1400016a0
movzx ecx, word [0x14000873a]
mov edx, 0x25
mov word [rbp + 7], ax
call fcn.1400016a0
movzx ecx, word [0x14000873c]
mov edx, 0x26
mov word [rbp + 9], ax
call fcn.1400016a0
movzx ecx, word [0x14000873e]
mov edx, 0x27
mov word [rbp + 0xb], ax
call fcn.1400016a0
movzx ecx, word [0x140008740]
mov edx, 0x28
mov word [rbp + 0xd], ax
call fcn.1400016a0
movzx ecx, word [0x140008742]
mov edx, 0x29
mov word [rbp + 0xf], ax
call fcn.1400016a0
movzx ecx, word [0x140008744]
mov edx, 0x2a
mov word [rbp + 0x11], ax
call fcn.1400016a0
movzx ecx, word [0x140008746]
mov edx, 0x2b
mov word [rbp + 0x13], ax
call fcn.1400016a0
movzx ecx, word [0x140008748]
mov edx, 0x2c
mov word [rbp + 0x15], ax
call fcn.1400016a0
movzx ecx, word [0x14000874a]
mov edx, 0x2d
mov word [rbp + 0x17], ax
call fcn.1400016a0
movzx ecx, word [0x14000874c]
mov edx, 0x2e
mov word [rbp + 0x19], ax
call fcn.1400016a0
movzx ecx, word [0x14000874e]
mov edx, 0x2f
mov word [rbp + 0x1b], ax
call fcn.1400016a0
movzx ecx, word [0x140008750]
mov edx, 0x30
mov word [rbp + 0x1d], ax
call fcn.1400016a0
movzx ecx, word [0x140008752]
mov edx, 0x31
mov word [rbp + 0x1f], ax
call fcn.1400016a0
movzx ecx, word [0x140008754]
mov edx, 0x32
mov word [rbp + 0x21], ax
call fcn.1400016a0
movzx ecx, word [0x140008756]
mov edx, 0x33
mov word [rbp + 0x23], ax
call fcn.1400016a0
movzx ecx, word [0x140008758]
mov edx, 0x34
mov word [rbp + 0x25], ax
call fcn.1400016a0
movzx ecx, word [0x14000875a]
mov edx, 0x35
mov word [rbp + 0x27], ax
call fcn.1400016a0
movzx ecx, word [0x14000875c]
mov edx, 0x36
mov word [rbp + 0x29], ax
call fcn.1400016a0
movzx ecx, word [0x14000875e]
mov edx, 0x37
mov word [rbp + 0x2b], ax
call fcn.1400016a0
movzx ecx, word [0x140008760]
mov edx, 0x38
mov word [rbp + 0x2d], ax
call fcn.1400016a0
movzx ecx, word [0x140008762]
mov edx, 0x39
mov word [rbp + 0x2f], ax
call fcn.1400016a0
movzx ecx, word [0x140008764]
mov edx, 0x3a
mov word [rbp + 0x31], ax
call fcn.1400016a0
movzx ecx, word [0x140008766]
mov edx, 0x3b
mov word [rbp + 0x33], ax
call fcn.1400016a0
movzx ecx, word [0x140008768]
mov edx, 0x3c
mov word [rbp + 0x35], ax
call fcn.1400016a0
movzx ecx, word [0x14000876a]
mov edx, 0x3d
mov word [rbp + 0x37], ax
call fcn.1400016a0
movzx ecx, word [0x14000876c]
mov edx, 0x3e
mov word [rbp + 0x39], ax
call fcn.1400016a0
movzx ecx, word [0x14000876e]
mov edx, 0x3f
mov word [rbp + 0x3b], ax
call fcn.1400016a0
movzx ecx, word [0x140008770]
mov edx, 0x40
mov word [rbp + 0x3d], ax
call fcn.1400016a0
movzx ecx, word [0x140008772]
mov edx, 0x41
mov word [rbp + 0x3f], ax
call fcn.1400016a0
movzx ecx, word [0x140008774]
mov edx, 0x42
mov word [rbp + 0x41], ax
call fcn.1400016a0
mov word [rbp + 0x43], ax
mov ecx, esi
xor eax, eax
mov rdx, rsi
mov word [rbp + 0x45], ax
nop
lea eax, [rdi + rcx]
inc ecx
xor word [rbp + rdx*2 - 0x41], ax
movsxd rdx, ecx
cmp rdx, 0x43
jb 0x1400068b0
mov ecx, 0x6c
mov word [rbp + 0x45], si
mov word [rbp - 0x69], r8w
lea edx, [rcx - 0x6b]
call fcn.1400016a0
lea ecx, [rdx + 0x64]
mov word [rbp - 0x67], ax
lea edx, [rcx - 0x63]
call fcn.1400016a0
lea ecx, [rdx + 0x76]
mov word [rbp - 0x65], ax
lea edx, [rcx - 0x75]
call fcn.1400016a0
lea ecx, [rdx + 0x76]
mov word [rbp - 0x63], ax
lea edx, [rcx - 0x75]
call fcn.1400016a0
lea ecx, [rdx + 0x2a]
mov word [rbp - 0x61], ax
lea edx, [rcx - 0x29]
call fcn.1400016a0
lea ecx, [rdx + 0x5f]
mov word [rbp - 0x5f], ax
lea edx, [rcx - 0x5e]
call fcn.1400016a0
lea ecx, [rdx + 0x66]
mov word [rbp - 0x5d], ax
lea edx, [rcx - 0x65]
call fcn.1400016a0
lea edx, [rcx - 0x64]
mov word [rbp - 0x5b], ax
call fcn.1400016a0
xor ecx, ecx
mov word [rbp - 0x59], ax
lea edx, [rcx + 9]
call fcn.1400016a0
lea edx, [rcx + 0xa]
mov word [rbp - 0x57], ax
movzx ecx, word [0x14000874c]
call fcn.1400016a0
movzx ecx, word [0x14000874e]
mov edx, 0xb
mov word [rbp - 0x55], ax
call fcn.1400016a0
movzx ecx, word [0x140008750]
mov edx, 0xc
mov word [rbp - 0x53], ax
call fcn.1400016a0
movzx ecx, word [0x140008752]
mov edx, 0xd
mov word [rbp - 0x51], ax
call fcn.1400016a0
movzx ecx, word [0x140008754]
mov edx, 0xe
mov word [rbp - 0x4f], ax
call fcn.1400016a0
movzx ecx, word [0x140008756]
mov edx, 0xf
mov word [rbp - 0x4d], ax
call fcn.1400016a0
movzx ecx, word [0x140008758]
mov edx, 0x10
mov word [rbp - 0x4b], ax
call fcn.1400016a0
movzx ecx, word [0x14000875a]
mov edx, 0x11
mov word [rbp - 0x49], ax
call fcn.1400016a0
movzx ecx, word [0x14000875c]
mov edx, 0x12
mov word [rbp - 0x47], ax
call fcn.1400016a0
mov word [rbp - 0x45], ax
mov rdx, rsi
xor eax, eax
mov word [rbp - 0x43], ax
nop word [rax + rax]
lea ecx, [rdi + rax]
inc eax
xor word [rbp + rdx*2 - 0x69], cx
movsxd rdx, eax
cmp rdx, 0x13
jb 0x140006a20
lea r8, [rbp - 0x41]
mov word [rbp - 0x43], si
lea rdx, [rbp - 0x69]
mov rcx, rbx
call fcn.140002590
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400063e0