Function at 0x14000a340
Capabilities:
Create thread
Log keystrokes via polling
Terminate process

Disassembly:
sub rsp, 0x48
mov ecx, dword [0x140095108]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a37b
cmp byte [0x140095be0], 0
jne 0x14000a37b
cmp byte [0x14009506c], 0
jne 0x14000a37b
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x140095bf8], rax
mov byte [0x140095be0], 1
mov ecx, dword [0x140095108]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a416
cmp byte [0x140095be0], 0
je 0x14000a416
cmp byte [0x14009506c], 0
jne 0x14000a416
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140095bf8]
cmp rax, 0x1f4
jb 0x14000a3f1
cmp byte [0x140095be2], 0
jne 0x14000a3f1
mov ecx, dword [0x140095120]
xor r8d, r8d
mov eax, dword [0x140095124]
xor edx, edx
mov dword [0x140095124], ecx
lea rcx, [0x1400785a0]
mov dword [0x140095120], eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthread]
mov byte [0x140095be2], 1
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140095bf8]
cmp rax, 0x1f4
jae 0x14000a416
cmp byte [0x140095be2], 0
je 0x14000a416
mov byte [0x140095be2], 0
mov ecx, dword [0x140095108]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14000a480
cmp byte [0x140095be0], al
je 0x14000a480
cmp byte [0x14009506c], al
jne 0x14000a480
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140095bf8]
cmp rax, 0x1f4
jae 0x14000a479
cmp byte [0x14009510d], 0
lea rcx, [0x140078680]
sete al
xor r8d, r8d
xor edx, edx
mov byte [0x14009510d], al
test al, al
jne 0x14000a473
lea rcx, [0x140078760]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthread]
mov byte [0x140095be0], 0
mov ecx, dword [0x140095108]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a4a1
cmp byte [0x14009506c], 0
je 0x14000a4a1
mov byte [0x140095be0], 1
mov ecx, dword [0x140095108]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14000a4ce
cmp byte [0x140095be0], al
je 0x14000a4ce
cmp byte [0x14009506c], al
je 0x14000a4ce
mov byte [0x14009506c], al
mov byte [0x140095be0], al
mov ecx, dword [0x1400951c8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a505
cmp byte [0x140095be5], 0
jne 0x14000a505
cmp byte [0x14009506c], 0
jne 0x14000a505
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x140095bf8], rax
mov byte [0x140095be5], 1
mov ecx, dword [0x1400951c8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a5a0
cmp byte [0x140095be5], 0
je 0x14000a5a0
cmp byte [0x14009506c], 0
jne 0x14000a5a0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140095bf8]
cmp rax, 0x1f4
jb 0x14000a57b
cmp byte [0x140095be2], 0
jne 0x14000a57b
mov ecx, dword [0x1400951e0]
xor r8d, r8d
mov eax, dword [0x1400951e4]
xor edx, edx
mov dword [0x1400951e4], ecx
lea rcx, [0x1400785a0]
mov dword [0x1400951e0], eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthread]
mov byte [0x140095be2], 1
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140095bf8]
cmp rax, 0x1f4
jae 0x14000a5a0
cmp byte [0x140095be2], 0
je 0x14000a5a0
mov byte [0x140095be2], 0
mov ecx, dword [0x1400951c8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14000a60a
cmp byte [0x140095be5], al
je 0x14000a60a
cmp byte [0x14009506c], al
jne 0x14000a60a
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140095bf8]
cmp rax, 0x1f4
jae 0x14000a603
cmp byte [0x1400951cd], 0
lea rcx, [0x140078680]
sete al
xor r8d, r8d
xor edx, edx
mov byte [0x1400951cd], al
test al, al
jne 0x14000a5fd
lea rcx, [0x140078760]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthread]
mov byte [0x140095be5], 0
mov ecx, dword [0x1400951c8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a62b
cmp byte [0x14009506c], 0
je 0x14000a62b
mov byte [0x140095be5], 1
mov ecx, dword [0x1400951c8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14000a658
cmp byte [0x140095be5], al
je 0x14000a658
cmp byte [0x14009506c], al
je 0x14000a658
mov byte [0x14009506c], al
mov byte [0x140095be5], al
mov ecx, dword [0x140095070]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a682
cmp byte [0x140095be6], 0
jne 0x14000a682
cmp byte [0x14009506c], 0
jne 0x14000a682
mov byte [0x140095be6], 1
mov ecx, dword [0x140095070]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14000a6d7
cmp byte [0x140095be6], al
je 0x14000a6d7
cmp byte [0x14009506c], al
jne 0x14000a6d7
mov rcx, qword [0x140095080]
test rcx, rcx
je 0x14000a6d0
movzx eax, byte [0x140095069]
test eax, eax
sete byte [0x140095069]
test eax, eax
jne 0x14000a6c8
lea edx, [rax + 1]
jmp 0x14000a6ca
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov byte [0x140095be6], 0
mov ecx, dword [0x140095070]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a6f8
cmp byte [0x14009506c], 0
je 0x14000a6f8
mov byte [0x140095be6], 1
mov ecx, dword [0x140095070]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14000a725
cmp byte [0x140095be6], al
je 0x14000a725
cmp byte [0x14009506c], al
je 0x14000a725
mov byte [0x14009506c], al
mov byte [0x140095be6], al
mov ecx, dword [0x140095074]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a75c
cmp byte [0x140095be3], 0
jne 0x14000a75c
cmp byte [0x14009506c], 0
jne 0x14000a75c
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x140095bf8], rax
mov byte [0x140095be3], 1
mov ecx, dword [0x140095074]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a831
cmp byte [0x140095be3], 0
je 0x14000a831
cmp byte [0x14009506c], 0
jne 0x14000a831
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140095bf8]
cmp rax, 0x1f4
jb 0x14000a831
lea rdx, str.C:YoClicker2.0Lconfig.cfg
lea rcx, [rsp + 0x20]
call fcn.14000aa40
mov rdx, rax
lea rcx, [0x140095100]
call fcn.140004fa0
lea rdx, str.C:YoClicker2.0Rconfig.cfg
lea rcx, [rsp + 0x20]
call fcn.14000aa40
mov rdx, rax
lea rcx, [0x1400951c0]
call fcn.140004fa0
lea rdx, str.C:YoClicker2.0Sconfig.cfg
lea rcx, [rsp + 0x20]
call fcn.14000aa40
mov rdx, rax
call fcn.14007a7a0
lea rdx, str.C:YoClicker2.0Mconfig.cfg
lea rcx, [rsp + 0x20]
call fcn.14000aa40
mov rdx, rax
lea rcx, [0x140095060]
call fcn.140077e10
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, dword [0x140095074]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14000a858
cmp byte [0x140095be3], al
je 0x14000a858
cmp byte [0x14009506c], al
jne 0x14000a858
mov byte [0x140095be3], al
mov ecx, dword [0x140095074]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a879
cmp byte [0x14009506c], 0
je 0x14000a879
mov byte [0x140095be3], 1
mov ecx, dword [0x140095074]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14000a8a6
cmp byte [0x140095be3], al
je 0x14000a8a6
cmp byte [0x14009506c], al
je 0x14000a8a6
mov byte [0x14009506c], al
mov byte [0x140095be3], al
mov ecx, dword [0x140095078]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a8d0
cmp byte [0x140095be4], 0
jne 0x14000a8d0
cmp byte [0x14009506c], 0
jne 0x14000a8d0
mov byte [0x140095be4], 1
mov ecx, dword [0x140095078]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14000a917
cmp byte [0x140095be4], al
je 0x14000a917
cmp byte [0x14009506c], al
jne 0x14000a917
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor r8d, r8d
lea rcx, [0x1400785a0]
xor edx, edx
mov qword [0x140095088], rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthread]
mov byte [0x140095be4], 0
mov ecx, dword [0x140095078]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a938
cmp byte [0x14009506c], 0
je 0x14000a938
mov byte [0x140095be4], 1
mov ecx, dword [0x140095078]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14000a965
cmp byte [0x140095be4], al
je 0x14000a965
cmp byte [0x14009506c], al
je 0x14000a965
mov byte [0x14009506c], al
mov byte [0x140095be4], al
add rsp, 0x48
ret