Function at 0x140013300
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x140121080]
xor rax, rsp
mov qword [rbp + 0x3f], rax
movsd xmm6, qword [0x14010b318]
movzx edi, byte [rbp + 0xf]
mov esi, 4
nop
mov rax, qword [0x140173b50]
cmp byte [rax + 0x360], 0
je 0x140013395
mov rbx, qword [0x140172970]
lea r9, [rbp + 0x17]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
mov dword [rbp + 0x17], 0xbf800000
lea r8, [rbx + 0x68]
mov dword [rsp + 0x20], 4
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x140013395
lea rdx, [rbx + 0x68]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
mov rax, qword [0x140173b50]
cmp byte [rax + 0x361], 0
je 0x14001345e
mov rbx, qword [0x140172970]
lea r9, [rbp + 0x1f]
movss xmm0, dword [rax + 0x364]
xor dil, dil
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
lea r8, [rbx + 0x2738]
movss dword [rbp + 0x1f], xmm0
mov dword [rsp + 0x20], 4
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x1400133fd
lea rdx, [rbx + 0x2738]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
mov rax, qword [0x140173b50]
lea r9, [rbp + 0x27]
mov rbx, qword [0x140172970]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
movss xmm0, dword [rax + 0x364]
lea r8, [rbx + 0x273c]
movss dword [rbp + 0x27], xmm0
mov dword [rsp + 0x20], 4
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x14001351a
lea rdx, [rbx + 0x273c]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
jmp 0x14001351a
test dil, dil
jne 0x14001351a
mov rax, qword [0x140173b50]
lea r9, [rbp + 0x2f]
mov rbx, qword [0x140172970]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
movss xmm0, dword [rax + 0x364]
lea r8, [rbx + 0x2738]
movss dword [rbp + 0x2f], xmm0
mov dword [rsp + 0x20], 4
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x1400134bf
lea rdx, [rbx + 0x2738]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
mov rax, qword [0x140173b50]
lea r9, [rbp + 0x37]
mov rbx, qword [0x140172970]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
movss xmm0, dword [rax + 0x364]
lea r8, [rbx + 0x273c]
movss dword [rbp + 0x37], xmm0
mov dword [rsp + 0x20], 4
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x140013517
lea rdx, [rbx + 0x273c]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
mov dil, 1
mov rax, qword [0x140173b50]
cmp byte [rax + 0x368], 0
je 0x1400135cc
mov rax, qword [0x140172960]
test rax, rax
je 0x1400135cc
mov edx, dword [0x140171490]
lea rbx, [rax + 0xe4c]
mov rcx, qword [0x140173b40]
lea r9, [rbp + 0x17]
mov r8, rbx
mov dword [rbp + 0x17], 0
mov dword [rsp + 0x20], 4
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x140013581
mov rdx, rbx
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
mov rbx, qword [0x140172960]
lea r9, [rbp + 0x17]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
mov dword [rbp + 0x17], 0
lea r8, [rbx + 0xe50]
mov dword [rsp + 0x20], 4
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x1400135cc
lea rdx, [rbx + 0xe50]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
mov rax, qword [0x140173b50]
cmp byte [rax + 0x369], 0
je 0x14001362d
mov rbx, qword [0x140172970]
lea r9, [rbp + 0xf]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
mov byte [reloc.WS2_32.dll_accept], 0
lea r8, [rbx + 0x10c0]
mov byte [rbp + 0xf], 1
mov dword [rsp + 0x20], 1
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x140013685
lea rdx, [rbx + 0x10c0]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
jmp 0x140013685
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x140013685
mov rbx, qword [0x140172970]
lea r9, [rbp + 0xf]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
mov byte [rbp + 0xf], 0
lea r8, [rbx + 0x10c0]
mov dword [rsp + 0x20], 1
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x14001367e
lea rdx, [rbx + 0x10c0]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
mov byte [reloc.WS2_32.dll_accept], 1
mov rax, qword [0x140173b50]
cmp byte [rax + 0x36a], 0
je 0x1400137c2
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rsi + rcx]
cmp dword [0x140173ba0], eax
jle 0x140013717
lea rcx, [0x140173ba0]
call fcn.1400ec130
cmp dword [0x140173ba0], 0xffffffff
jne 0x140013717
mov rdx, qword [0x140172968]
lea r8, [0x140173b88]
xorps xmm0, xmm0
lea rcx, [0x140173b28]
xor eax, eax
add rdx, 0x140
mov r9d, Ordinal_27
mov qword [0x140173b98], rax
movups xmmword [0x140173b88], xmm0
call fcn.140089550
lea rcx, [0x1400f14d0]
call fcn.1400ec034
lea rcx, [0x140173ba0]
call fcn.1400ec0c4
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140013766
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movaps xmm1, xmm6
movsd qword [rbp - 0x19], xmm6
mov r8d, eax
mov eax, 0x5ac5242b
imul r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x169
sub r8d, ecx
movd xmm0, r8d
cvtdq2pd xmm0, xmm0
unpcklpd xmm1, xmm0
movaps xmmword [rbp - 0x29], xmm1
jmp 0x14001377e
movups xmm0, xmmword [0x140173b88]
movsd xmm1, qword [0x140173b98]
movaps xmmword [rbp - 0x29], xmm0
movsd qword [rbp - 0x19], xmm1
mov rbx, qword [0x140172968]
lea r9, [rbp - 0x29]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
mov dword [rsp + 0x20], Ordinal_30
lea r8, [rbx + 0x140]
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x1400137c2
lea rdx, [rbx + 0x140]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
mov rax, qword [0x140173b50]
cmp byte [rax + 0x36b], 0
je 0x140013869
mov rbx, qword [0x140172978]
lea r9, [rbp + 0x17]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
mov dword [rbp + 0x17], 0x447a0000
lea r8, [rbx + 0x2754]
mov dword [rsp + 0x20], 4
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x140013821
lea rdx, [rbx + 0x2754]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
mov rbx, qword [0x140172978]
lea r9, [rbp + 0xf]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
mov byte [rbp + 0xf], 1
lea r8, [rbx + 0x2650]
mov dword [rsp + 0x20], 1
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x140013869
lea rdx, [rbx + 0x2650]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
mov rax, qword [0x140173b50]
cmp byte [rax + 0x36c], 0
je 0x1400139a8
movss xmm1, dword [rax + 0x370]
lea r9, [rbp - 0x29]
mov rbx, qword [0x140172968]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
cvtps2pd xmm1, xmm1
lea r8, [rbx + 0x158]
mov dword [rsp + 0x20], Ordinal_30
movaps xmm0, xmm1
movsd qword [rbp - 0x19], xmm1
unpcklpd xmm0, xmm1
movaps xmmword [rbp - 0x29], xmm0
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x1400138dc
lea rdx, [rbx + 0x158]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
mov rax, qword [0x140173b50]
lea r9, [rbp - 0x29]
mov rbx, qword [0x140172968]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
movss xmm1, dword [rax + 0x370]
cvtps2pd xmm1, xmm1
lea r8, [rbx + 0x158]
mov dword [rsp + 0x20], Ordinal_30
movaps xmm0, xmm1
movsd qword [rbp - 0x19], xmm1
unpcklpd xmm0, xmm1
movaps xmmword [rbp - 0x29], xmm0
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x140013942
lea rdx, [rbx + 0x158]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
mov rax, qword [0x140173b50]
lea r9, [rbp - 0x29]
mov rbx, qword [0x140172968]
mov edx, dword [0x140171490]
mov rcx, qword [0x140173b40]
movss xmm1, dword [rax + 0x370]
cvtps2pd xmm1, xmm1
lea r8, [rbx + 0x158]
mov dword [rsp + 0x20], Ordinal_30
movaps xmm0, xmm1
movsd qword [rbp - 0x19], xmm1
unpcklpd xmm0, xmm1
movaps xmmword [rbp - 0x29], xmm0
call qword [sym.imp.VMM.dll_VMMDLL_MemWrite]
test eax, eax
jne 0x1400139a8
lea rdx, [rbx + 0x158]
lea rcx, str.____Failed_to_write_Memory_at_0x_p_n
call fcn.14000d360
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x17], 1
call fcn.140008720
jmp 0x140013340