Function at 0x140007be0
Capabilities:
Execute command
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rdi, rcx
call fcn.140004bc0
lea rbx, [rdi + 0x28]
nop dword [rax + rax]
mov ecx, 0x78
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140007cef
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
test rax, rax
je 0x140007ca8
cmp byte [rdi + 0x77], 0
mov rcx, rax
je 0x140007c6a
mov edx, 9
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
xor ebx, ebx
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov rdx, 0xfffffffffffffffe
mov dword [rsp + 0x20], ebx
jmp 0x140007c8e
mov edx, 6
call qword [sym.imp.USER32.dll_ShowWindow]
xor eax, eax
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], eax
mov rdx, 0xffffffffffffffff
mov dword [rsp + 0x20], eax
mov rcx, qword [rdi + 0x20]
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.USER32.dll_SetWindowPos]
cmp byte [rdi + 0x77], 0
sete al
mov byte [rdi + 0x77], al
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp + 0x70]
call fcn.1400011d0
mov rax, qword [rbp + 0x70]
movabs rcx, 0x7ffffffff4143dff
cmp rax, rcx
jge 0x140007cd4
add rax, 0xbebc200
jmp 0x140007cde
movabs rax, 0x7fffffffffffffff
lea rcx, [rbp + 0x68]
mov qword [rbp + 0x68], rax
call fcn.14000aca0
lea rbx, [rdi + 0x28]
mov ecx, 0x1b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140007e4c
cmp byte [0x140014a48], 0
je 0x140007e4c
mov byte [rdi + 0x77], 1
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
test rax, rax
je 0x140007d86
cmp byte [rdi + 0x77], 0
mov rcx, rax
je 0x140007d48
mov edx, 9
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov rdx, 0xfffffffffffffffe
jmp 0x140007d5a
mov edx, 6
call qword [sym.imp.USER32.dll_ShowWindow]
mov rdx, 0xffffffffffffffff
mov rcx, qword [rdi + 0x20]
xor eax, eax
mov dword [rsp + 0x30], 3
xor r9d, r9d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SetWindowPos]
cmp byte [rdi + 0x77], 0
sete al
mov byte [rdi + 0x77], al
mov rcx, rdi
call fcn.140006f70
call fcn.1400023e0
mov rcx, rdi
call fcn.140004bc0
xor eax, eax
mov dword [rdi + 0x28], 2
lea rbx, [rdi + 0x28]
mov qword [rdi + 0x3c], rax
lea rcx, [0x14000e850]
mov dword [rdi + 0x2c], 1
mov dword [rdi + 0x30], 1
mov qword [rdi + 0x34], 1
mov dword [rdi + 0x6c], 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
lea rcx, [rbp + 0x78]
call fcn.1400011d0
mov rax, qword [rbp + 0x78]
movabs rcx, 0x7ffffffff4143dff
cmp rax, rcx
jge 0x140007e35
add rax, 0xbebc200
jmp 0x140007e3f
movabs rax, 0x7fffffffffffffff
lea rcx, [rbp + 0x68]
mov qword [rbp + 0x68], rax
call fcn.14000aca0
mov ecx, 0x70
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x140007ef5
cmp byte [rdi + 0x72], 0
je 0x140007e70
cmp dword [rdi + 0x38], 0
jg 0x140007ef5
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x140007edd
cmp byte [rdi + 0x72], 0
je 0x140007e8c
cmp dword [rdi + 0x38], 0
jg 0x140007edd
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140007ea6
mov rcx, rdi
call fcn.140005590
jmp 0x140007f19
cmp dword [rbx], 1
jne 0x140007ec3
cmp byte [rdi + 0x72], 0
jne 0x140007eb7
cmp byte [rdi + 0x73], 0
je 0x140007ec3
mov edx, dword [rdi + 0x14]
mov ecx, dword [rdi + 0x10]
call qword [sym.imp.USER32.dll_SetCursorPos]
mov word [rdi + 0x72], 0
mov byte [rdi + 0x71], 0
mov byte [rdi + 0x76], 0
mov dword [0x140014a4c], 0
jmp 0x140007f19
cmp byte [rdi + 0x76], 0
jne 0x140007eef
mov rcx, rdi
call fcn.140006e80
mov byte [rdi + 0x76], 1
cmp dword [rdi + 0x2c], 2
jmp 0x140007f0b
cmp byte [rdi + 0x76], 0
jne 0x140007f07
mov rcx, rdi
call fcn.140006e80
mov byte [rdi + 0x76], 1
cmp dword [rdi + 0x2c], 1
jne 0x140007f19
mov rcx, rdi
mov byte [rdi + 0x72], 1
call fcn.140004d60
mov ecx, 0x71
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140007fd6
cmp byte [0x140014a59], 0
jne 0x140007fdd
cmp byte [rdi + 0x70], 0
je 0x140007fcd
mov eax, dword [rdi + 8]
mov edx, 0x201
movzx r9d, word [rdi + 0xc]
add eax, 0x2d
mov rcx, qword [rdi + 0x20]
mov r8d, 1
movzx ebx, ax
shl r9, 0x10
or r9, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
movzx r9d, word [rdi + 0xc]
xor r8d, r8d
mov rcx, qword [rdi + 0x20]
mov edx, 0x202
shl r9, 0x10
or r9, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [rsp + 0x50]
call fcn.1400011d0
mov rax, qword [rsp + 0x50]
movabs rcx, 0x7ffffffffa0a1eff
cmp rax, rcx
jge 0x140007fb2
add rax, 0x5f5e100
jmp 0x140007fbc
movabs rax, 0x7fffffffffffffff
lea rcx, [rbp + 0x68]
mov qword [rbp + 0x68], rax
call fcn.14000aca0
lea rbx, [rdi + 0x28]
mov byte [0x140014a59], 1
jmp 0x140007fdd
mov byte [0x140014a59], 0
mov ecx, 0x79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008007
cmp byte [0x140014a58], 0
jne 0x14000800e
mov rcx, rdi
call fcn.140007060
mov byte [0x140014a58], 1
jmp 0x14000800e
mov byte [0x140014a58], 0
mov ecx, 0x7b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008038
cmp byte [0x140014a68], 0
jne 0x14000803f
mov rcx, rdi
call fcn.1400079f0
mov byte [0x140014a68], 1
jmp 0x14000803f
mov byte [0x140014a68], 0
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008069
cmp byte [0x140014a60], 0
jne 0x140008070
mov rcx, rdi
call fcn.1400068e0
mov byte [0x140014a60], 1
jmp 0x140008070
mov byte [0x140014a60], 0
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008121
cmp dword [rdi + 0x2c], 1
jne 0x140008309
cmp dword [rbx], 1
lea rcx, [0x14000e850]
mov rdx, rbx
cmove rdx, rbx
xor eax, eax
cmp dword [rbx], 1
sete al
inc eax
mov dword [rdx], eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rsp + 0x58]
call fcn.1400011d0
mov rax, qword [rsp + 0x58]
movabs rcx, 0x7ffffffff4143dff
cmp rax, rcx
jge 0x1400082f2
add rax, 0xbebc200
jmp 0x1400082fc
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000821f
mov eax, dword [rdi + 0x2c]
cmp eax, 1
jne 0x14000818c
mov eax, dword [rbx]
mov dword [rdi + 0x44], eax
mov eax, dword [rdi + 0x30]
mov dword [rdi + 0x48], eax
mov eax, dword [rdi + 0x34]
mov dword [rdi + 0x4c], eax
mov eax, dword [rdi + 0x3c]
mov dword [rdi + 0x50], eax
mov eax, dword [rdi + 0x38]
mov dword [rdi + 0x54], eax
mov eax, dword [rdi + 0x40]
mov dword [rdi + 0x58], eax
mov dword [rdi + 0x40], 3
mov dword [rdi + 0x2c], 2
mov qword [rdi + 0x34], 0xc
mov dword [rbx], 2
mov dword [rdi + 0x30], 1
mov dword [rdi + 0x3c], 1
jmp 0x1400081bb
cmp eax, 2
jne 0x140008203
mov eax, dword [rdi + 0x44]
mov dword [rbx], eax
mov eax, dword [rdi + 0x48]
mov dword [rdi + 0x30], eax
mov eax, dword [rdi + 0x4c]
mov dword [rdi + 0x34], eax
mov eax, dword [rdi + 0x50]
mov dword [rdi + 0x3c], eax
mov eax, dword [rdi + 0x54]
mov dword [rdi + 0x38], eax
mov eax, dword [rdi + 0x58]
mov dword [rdi + 0x40], eax
mov dword [rdi + 0x2c], 1
lea rcx, [0x14000e850]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rsp + 0x60]
call fcn.1400011d0
mov rax, qword [rsp + 0x60]
jmp 0x140008103
mov ecx, 9
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008242
cmp byte [rdi + 0x75], 0
jne 0x140008242
mov rcx, rdi
call fcn.1400059c0
jmp 0x140008309
mov ecx, 0x72
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000825f
mov rcx, rdi
call fcn.140005d10
jmp 0x140008309
mov ecx, 0x73
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000828b
mov rcx, rdi
call fcn.140005fb0
lea rcx, [rsp + 0x68]
call fcn.1400011d0
mov rax, qword [rsp + 0x68]
jmp 0x140008103
mov ecx, 0x77
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400082c9
mov rcx, rdi
call fcn.1400065f0
lea rcx, [rsp + 0x70]
call fcn.1400011d0
mov rax, qword [rsp + 0x70]
movabs rcx, 0x7ffffffffa0a1eff
cmp rax, rcx
jge 0x1400082f2
add rax, 0x5f5e100
jmp 0x1400082fc
mov ecx, 4
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008309
mov rcx, rdi
call fcn.140006bc0
lea rcx, [rsp + 0x78]
call fcn.1400011d0
mov rax, qword [rsp + 0x78]
jmp 0x1400082b2
movabs rax, 0x7fffffffffffffff
lea rcx, [rbp + 0x68]
mov qword [rbp + 0x68], rax
call fcn.14000aca0
cmp byte [rdi + 0x74], 0
je 0x14000894b
mov ecx, 0x31
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400083b5
mov eax, dword [rdi + 0x30]
lea rcx, [rdi + 0x30]
test eax, eax
jle 0x140008336
dec eax
jmp 0x140008338
xor eax, eax
mov dword [rcx], eax
lea rcx, [0x14000e850]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x80]
call fcn.1400011d0
mov rax, qword [rbp - 0x80]
movabs rcx, 0x7ffffffffa0a1eff
cmp rax, rcx
jge 0x140008934
add rax, 0x5f5e100
jmp 0x14000893e
mov ecx, 0x32
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000843e
mov eax, dword [rdi + 0x30]
lea rcx, [rdi + 0x30]
cmp eax, 3
jge 0x1400083d5
inc eax
jmp 0x1400083da
mov eax, 3
mov dword [rcx], eax
lea rcx, [0x14000e850]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x78]
call fcn.1400011d0
mov rax, qword [rbp - 0x78]
jmp 0x140008397
mov ecx, 0x33
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008539
mov eax, dword [rdi + 0x34]
lea rcx, [rdi + 0x34]
cmp eax, 1
jle 0x140008462
dec eax
jmp 0x140008467
mov eax, 1
mov dword [rcx], eax
lea rcx, [0x14000e850]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
cmp dword [rdi + 0x34], 1
jne 0x140008506
lea rcx, [0x14000e850]
mov dword [rdi + 0x3c], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x70]
call fcn.1400011d0
mov rax, qword [rbp - 0x70]
movabs rcx, 0x7ffffffffd050f7f
cmp rax, rcx
jge 0x140008934
add rax, 0x2faf080
jmp 0x14000893e
mov ecx, 0x34
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400085d5
mov ecx, dword [rdi + 0x34]
mov eax, dword [rdi + 0x38]
cmp ecx, eax
jl 0x14000855f
test eax, eax
jne 0x14000894b
cmp ecx, 0x63
jge 0x14000856c
lea eax, [rcx + 1]
mov dword [rdi + 0x34], eax
jmp 0x140008573
mov dword [rdi + 0x34], 0x63
lea rcx, [0x14000e850]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x68]
call fcn.1400011d0
mov rax, qword [rbp - 0x68]
jmp 0x14000851b
mov ecx, 0x35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008677
mov eax, dword [rdi + 0x3c]
lea rcx, [rdi + 0x3c]
test eax, eax
jle 0x1400085f8
dec eax
jmp 0x1400085fa
xor eax, eax
mov dword [rcx], eax
lea rcx, [0x14000e850]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x60]
call fcn.1400011d0
mov rax, qword [rbp - 0x60]
movabs rcx, 0x7ffffffff4143dff
cmp rax, rcx
jge 0x140008934
add rax, 0xbebc200
jmp 0x14000893e
mov ecx, 0x36
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000870e
cmp dword [rdi + 0x34], 1
jle 0x14000894b
mov eax, dword [rdi + 0x3c]
lea rcx, [rdi + 0x3c]
cmp eax, 2
jge 0x1400086a5
inc eax
jmp 0x1400086aa
mov eax, 2
mov dword [rcx], eax
lea rcx, [0x14000e850]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x58]
call fcn.1400011d0
mov rax, qword [rbp - 0x58]
jmp 0x140008659
mov ecx, 0x37
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008793
mov eax, dword [rdi + 0x38]
lea rcx, [rdi + 0x38]
test eax, eax
jle 0x14000872d
dec eax
jmp 0x14000872f
xor eax, eax
mov dword [rcx], eax
lea rcx, [0x14000e850]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x50]
call fcn.1400011d0
mov rax, qword [rbp - 0x50]
jmp 0x14000851b
mov ecx, 0x38
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008822
cmp dword [rdi + 0x2c], 1
jne 0x140008810
mov eax, dword [rdi + 0x38]
lea rcx, [rdi + 0x38]
cmp eax, 0x63
jge 0x1400087b9
inc eax
jmp 0x1400087be
mov eax, 0x63
mov dword [rcx], eax
lea rcx, [0x14000e850]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x48]
call fcn.1400011d0
mov rax, qword [rbp - 0x48]
jmp 0x14000851b
mov ecx, 0x39
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400088a7
mov eax, dword [rdi + 0x40]
lea rcx, [rdi + 0x40]
test eax, eax
jle 0x140008841
dec eax
jmp 0x140008843
xor eax, eax
mov dword [rcx], eax
lea rcx, [0x14000e850]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x40]
call fcn.1400011d0
mov rax, qword [rbp - 0x40]
jmp 0x140008659
mov ecx, 0x30
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000894b
mov eax, dword [rdi + 0x40]
lea rcx, [rdi + 0x40]
cmp eax, 3
jge 0x1400088cb
inc eax
jmp 0x1400088d0
mov eax, 3
mov dword [rcx], eax
lea rcx, [0x14000e850]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x38]
call fcn.1400011d0
mov rax, qword [rbp - 0x38]
jmp 0x140008659
movabs rax, 0x7fffffffffffffff
lea rcx, [rbp + 0x68]
mov qword [rbp + 0x68], rax
call fcn.14000aca0
cmp byte [rdi + 0x75], 0
je 0x140008e47
mov ecx, 0x31
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400089eb
lea rcx, [0x14000e850]
mov dword [rdi + 0x6c], 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x30]
call fcn.1400011d0
mov rax, qword [rbp - 0x30]
movabs rcx, 0x7ffffffffd050f7f
cmp rax, rcx
jge 0x140008e30
add rax, 0x2faf080
jmp 0x140008e3a
mov ecx, 0x32
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008a64
lea rcx, [0x14000e850]
mov dword [rdi + 0x6c], 2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x28]
call fcn.1400011d0
mov rax, qword [rbp - 0x28]
jmp 0x1400089cd
mov ecx, 0x33
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008add
lea rcx, [0x14000e850]
mov dword [rdi + 0x6c], 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x20]
call fcn.1400011d0
mov rax, qword [rbp - 0x20]
jmp 0x1400089cd
mov ecx, 0x34
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008b56
lea rcx, [0x14000e850]
mov dword [rdi + 0x6c], 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x18]
call fcn.1400011d0
mov rax, qword [rbp - 0x18]
jmp 0x1400089cd
mov ecx, 0x35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008bcf
lea rcx, [0x14000e850]
mov dword [rdi + 0x6c], 5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 0x10]
call fcn.1400011d0
mov rax, qword [rbp - 0x10]
jmp 0x1400089cd
mov ecx, 0x36
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008c48
lea rcx, [0x14000e850]
mov dword [rdi + 0x6c], 6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp - 8]
call fcn.1400011d0
mov rax, qword [rbp - 8]
jmp 0x1400089cd
mov ecx, 0x37
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008cc1
lea rcx, [0x14000e850]
mov dword [rdi + 0x6c], 7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp]
call fcn.1400011d0
mov rax, qword [rbp]
jmp 0x1400089cd
mov ecx, 0x38
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008d3a
lea rcx, [0x14000e850]
mov dword [rdi + 0x6c], 8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp + 8]
call fcn.1400011d0
mov rax, qword [rbp + 8]
jmp 0x1400089cd
mov ecx, 0x39
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008db3
lea rcx, [0x14000e850]
mov dword [rdi + 0x6c], 9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp + 0x10]
call fcn.1400011d0
mov rax, qword [rbp + 0x10]
jmp 0x1400089cd
mov ecx, 0x30
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140008e47
lea rcx, [0x14000e850]
mov dword [rdi + 0x6c], 0xa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [rdi + 0x40]
mov r9d, dword [rdi + 0x30]
mov r8d, dword [rbx]
mov edx, dword [rdi + 4]
mov ecx, dword [rdi]
mov dword [rsp + 0x48], eax
mov eax, dword [rdi + 0x2c]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + 0x6c]
mov dword [rsp + 0x38], eax
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi + 0x34]
mov dword [rsp + 0x20], eax
call fcn.140002be0
mov rcx, rdi
call fcn.140006f70
lea rcx, [rbp + 0x18]
call fcn.1400011d0
mov rax, qword [rbp + 0x18]
jmp 0x1400089cd
movabs rax, 0x7fffffffffffffff
lea rcx, [rbp + 0x68]
mov qword [rbp + 0x68], rax
call fcn.14000aca0
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x12
and al, 1
mov byte [rdi + 0x74], al
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
and al, 1
mov byte [rdi + 0x75], al
jmp 0x140007c10