Function at 0x1400070a0
Capabilities:
Create thread
Log keystrokes via polling
Terminate process

Disassembly:
push rbx
sub rsp, 0x50
mov ecx, dword [0x1400810a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400070dd
cmp byte [0x140081b40], 0
jne 0x1400070dd
cmp byte [0x140081056], 0
jne 0x1400070dd
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x140081b58], rax
mov byte [0x140081b40], 1
mov ecx, dword [0x1400810a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor ebx, ebx
test ax, ax
je 0x140007184
cmp byte [0x140081b40], bl
je 0x140007184
cmp byte [0x140081056], bl
jne 0x140007184
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140081b58]
cmp rax, 0x1f4
jb 0x140007161
cmp byte [0x140081b42], bl
jne 0x140007161
mov ecx, dword [0x1400810bc]
lea r8, [0x14006ab00]
mov eax, dword [0x1400810c0]
xor r9d, r9d
mov dword [0x1400810c0], ecx
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rbx
mov dword [0x1400810bc], eax
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [0x140081b42], 1
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140081b58]
cmp rax, 0x1f4
jae 0x140007184
cmp byte [0x140081b42], bl
je 0x140007184
mov byte [0x140081b42], bl
mov ecx, dword [0x1400810a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x1400071f7
cmp byte [0x140081b40], bl
je 0x1400071f7
cmp byte [0x140081056], bl
jne 0x1400071f7
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140081b58]
cmp rax, 0x1f4
jae 0x1400071f1
cmp byte [0x1400810ad], bl
lea r8, [0x14006ab20]
mov qword [rsp + 0x28], rbx
sete al
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov byte [0x1400810ad], al
xor edx, edx
xor ecx, ecx
test al, al
jne 0x1400071eb
lea r8, [0x14006ab40]
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [0x140081b40], bl
mov ecx, dword [0x1400810a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140007217
cmp byte [0x140081056], bl
je 0x140007217
mov byte [0x140081b40], 1
mov ecx, dword [0x1400810a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x140007244
cmp byte [0x140081b40], bl
je 0x140007244
cmp byte [0x140081056], bl
je 0x140007244
mov byte [0x140081056], bl
mov byte [0x140081b40], bl
mov ecx, dword [0x140081148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140007279
cmp byte [0x140081b44], bl
jne 0x140007279
cmp byte [0x140081056], bl
jne 0x140007279
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x140081b58], rax
mov byte [0x140081b44], 1
mov ecx, dword [0x140081148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000731e
cmp byte [0x140081b44], bl
je 0x14000731e
cmp byte [0x140081056], bl
jne 0x14000731e
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140081b58]
cmp rax, 0x1f4
jb 0x1400072fb
cmp byte [0x140081b42], bl
jne 0x1400072fb
mov ecx, dword [0x14008115c]
lea r8, [0x14006ab00]
mov eax, dword [0x140081160]
xor r9d, r9d
mov dword [0x140081160], ecx
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rbx
mov dword [0x14008115c], eax
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [0x140081b42], 1
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140081b58]
cmp rax, 0x1f4
jae 0x14000731e
cmp byte [0x140081b42], bl
je 0x14000731e
mov byte [0x140081b42], bl
mov ecx, dword [0x140081148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x140007391
cmp byte [0x140081b44], bl
je 0x140007391
cmp byte [0x140081056], bl
jne 0x140007391
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140081b58]
cmp rax, 0x1f4
jae 0x14000738b
cmp byte [0x14008114d], bl
lea r8, [0x14006ab20]
mov qword [rsp + 0x28], rbx
sete al
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov byte [0x14008114d], al
xor edx, edx
xor ecx, ecx
test al, al
jne 0x140007385
lea r8, [0x14006ab40]
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [0x140081b44], bl
mov ecx, dword [0x140081148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400073b1
cmp byte [0x140081056], bl
je 0x1400073b1
mov byte [0x140081b44], 1
mov ecx, dword [0x140081148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x1400073de
cmp byte [0x140081b44], bl
je 0x1400073de
cmp byte [0x140081056], bl
je 0x1400073de
mov byte [0x140081056], bl
mov byte [0x140081b44], bl
mov ecx, dword [0x140081058]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140007406
cmp byte [0x140081b45], bl
jne 0x140007406
cmp byte [0x140081056], bl
jne 0x140007406
mov byte [0x140081b45], 1
mov ecx, dword [0x140081058]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x140007455
cmp byte [0x140081b45], bl
je 0x140007455
cmp byte [0x140081056], bl
jne 0x140007455
movzx eax, byte [0x140081055]
mov rcx, qword [0x140081060]
test eax, eax
sete byte [0x140081055]
test eax, eax
jne 0x140007447
lea edx, [rax + 1]
jmp 0x140007449
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov byte [0x140081b45], bl
mov ecx, dword [0x140081058]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140007475
cmp byte [0x140081056], bl
je 0x140007475
mov byte [0x140081b45], 1
mov ecx, dword [0x140081058]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x1400074a2
cmp byte [0x140081b45], bl
je 0x1400074a2
cmp byte [0x140081056], bl
je 0x1400074a2
mov byte [0x140081056], bl
mov byte [0x140081b45], bl
mov ecx, dword [0x14008105c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400074d7
cmp byte [0x140081b43], bl
jne 0x1400074d7
cmp byte [0x140081056], bl
jne 0x1400074d7
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x140081b58], rax
mov byte [0x140081b43], 1
mov ecx, dword [0x14008105c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400075a3
cmp byte [0x140081b43], bl
je 0x1400075a3
cmp byte [0x140081056], bl
jne 0x1400075a3
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140081b58]
cmp rax, 0x1f4
jb 0x1400075a3
lea rdx, str.C:YoClicker2.0Lconfig.cfg
lea rcx, [rsp + 0x30]
call fcn.1400076f0
mov rdx, rax
lea rcx, [0x1400810a0]
call fcn.140003620
lea rdx, str.C:YoClicker2.0Rconfig.cfg
lea rcx, [rsp + 0x30]
call fcn.1400076f0
mov rdx, rax
lea rcx, [0x140081140]
call fcn.140003620
lea rdx, str.C:YoClicker2.0Sconfig.cfg
lea rcx, [rsp + 0x30]
call fcn.1400076f0
mov rdx, rax
call fcn.14006ab60
lea rdx, str.C:YoClicker2.0Mconfig.cfg
lea rcx, [rsp + 0x30]
call fcn.1400076f0
mov rdx, rax
call fcn.14006a820
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, dword [0x14008105c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x1400075ca
cmp byte [0x140081b43], bl
je 0x1400075ca
cmp byte [0x140081056], bl
jne 0x1400075ca
mov byte [0x140081b43], bl
mov ecx, dword [0x14008105c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400075ea
cmp byte [0x140081056], bl
je 0x1400075ea
mov byte [0x140081b43], 1
mov ecx, dword [0x14008105c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x140007617
cmp byte [0x140081b43], bl
je 0x140007617
cmp byte [0x140081056], bl
je 0x140007617
mov byte [0x140081056], bl
mov byte [0x140081b43], bl
add rsp, 0x50
pop rbx
ret