Function at 0x140001930
Capabilities:
Log keystrokes via polling

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x138
movups xmmword [rsp + 0x120], xmm6
mov rsi, qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ebx, 1
lea rbp, [0x140024040]
lea r13, section..data
mov rdi, rcx
mov r12d, edx
jmp 0x140001a1c
cmp dword [0x140024044], ebx
je 0x140001a81
cmp ebx, dword [0x140024048]
je 0x140001a88
cmp dword [0x14002404c], ebx
je 0x140001a8f
cmp dword [0x140024050], ebx
je 0x140001a96
cmp dword [0x140024054], ebx
je 0x140001a9d
cmp dword [0x140024058], ebx
je 0x140001aa4
cmp dword [0x14002405c], ebx
je 0x140001aab
cmp ebx, dword [0x140024060]
je 0x140001ab5
cmp ebx, dword [str._aE]
je 0x140001a40
cmp ebx, dword [0x140024068]
je 0x140001a40
cmp ebx, dword [0x14002406c]
je 0x140001a40
cmp ebx, dword [0x140024070]
je 0x140001a40
mov ecx, ebx
call rsi
mov ecx, ebx
call rsi
test ax, ax
je 0x140001a11
cmp dword [0x140024078], ebx
je 0x140001a11
cmp dword [0x140024074], ebx
jne 0x140001abf
add ebx, 1
cmp ebx, 0xfd
jg 0x140001a45
cmp dword [rbp], ebx
jne 0x140001970
xor eax, eax
nop word [rax + rax]
mov ebx, dword [r13 + rax*4]
jmp 0x1400019f0
add ebx, 1
jmp 0x1400019f0
pxor xmm0, xmm0
mov eax, dword [0x140024074]
lea rbp, [0x140030140]
movups xmmword [0x140030140], xmm0
cmp dword [rdi], eax
je 0x14000205b
movups xmm6, xmmword [rsp + 0x120]
add rsp, 0x138
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov eax, 1
jmp 0x140001a30
mov eax, 2
jmp 0x140001a30
mov eax, 3
jmp 0x140001a30
mov eax, 4
jmp 0x140001a30
mov eax, 5
jmp 0x140001a30
mov eax, 6
jmp 0x140001a30
mov eax, 7
jmp 0x140001a30
mov eax, 8
jmp 0x140001a30
mov ebp, ebx
mov r15d, ebx
mov dword [rdi], ebx
shr ebp, 0x1f
neg r15d
mov byte [0x14003005c], 0
cmovs r15d, ebx
mov ebx, ebp
movzx ebp, bpl
cmp r15d, 9
jbe 0x140002668
cmp r15d, 0x63
jbe 0x140001e35
cmp r15d, 0x3e7
jbe 0x14000262d
cmp r15d, 0x270f
jbe 0x14000263d
mov eax, 5
cmp r15d, 0x1869f
jbe 0x14000203b
cmp r15d, 0xf423f
jbe 0x1400026b0
mov r9d, 6
mov eax, 7
cmp r15d, 0x98967f
jbe 0x14000203f
cmp r15d, 0x5f5e0ff
jbe 0x140002382
cmp r15d, 0x3b9ac9ff
jbe 0x140002036
mov r9d, 9
lea r13, [rsp + 0x40]
mov dword [rsp + 0x2c], r9d
lea r14, [rsp + 0x30]
mov qword [rsp + 0x30], r13
lea edx, [r9 + rbx + 1]
mov r8d, 0x2d
mov rcx, r14
call fcn.14001e440
mov r9d, dword [rsp + 0x2c]
add rbp, qword [rsp + 0x30]
movabs rax, 0x3330323031303030
movabs rdx, 0x3730363035303430
mov qword [rsp + 0x50], rax
movabs rax, 0x3131303139303830
mov qword [rsp + 0x58], rdx
movabs rdx, 0x3531343133313231
mov qword [rsp + 0x60], rax
movabs rax, 0x3931383137313631
mov qword [rsp + 0x68], rdx
movabs rdx, 0x3332323231323032
mov qword [rsp + 0x70], rax
movabs rax, 0x3732363235323432
mov qword [rsp + 0x78], rdx
movabs rdx, 0x3133303339323832
mov qword [rsp + 0x80], rax
movabs rax, 0x3533343333333233
mov qword [rsp + 0x88], rdx
movabs rdx, 0x3933383337333633
mov qword [rsp + 0x90], rax
movabs rax, 0x3334323431343034
mov qword [rsp + 0x98], rdx
movabs rdx, 0x3734363435343434
mov qword [rsp + 0xa0], rax
movabs rax, 0x3135303539343834
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x3535343533353235
mov qword [rsp + 0xb0], rax
movabs rax, 0x3935383537353635
mov qword [rsp + 0xb8], rdx
movabs rdx, 0x3336323631363036
mov qword [rsp + 0xc0], rax
movabs rax, 0x3736363635363436
mov qword [rsp + 0xc8], rdx
movabs rdx, 0x3137303739363836
mov qword [rsp + 0xd0], rax
movabs rax, 0x3537343733373237
mov qword [rsp + 0xd8], rdx
movabs rdx, 0x3937383737373637
mov qword [rsp + 0xe0], rax
movabs rax, 0x3338323831383038
mov qword [rsp + 0xe8], rdx
movabs rdx, 0x3738363835383438
mov qword [rsp + 0xf0], rax
movabs rax, 0x3139303939383838
mov qword [rsp + 0xf8], rdx
movabs rdx, 0x3539343933393239
mov qword [rsp + 0x108], rdx
movabs rdx, 0x39393839373936
mov qword [rsp + 0x100], rax
movabs rax, 0x3935393439333932
mov qword [rsp + 0x109], rax
mov qword [rsp + 0x111], rdx
nop dword [rax]
mov edx, r15d
mov eax, r15d
imul rdx, rdx, 0x51eb851f
shr rdx, 0x25
imul ecx, edx, 0x64
sub eax, ecx
mov ecx, r15d
mov r15d, edx
mov edx, r9d
add eax, eax
lea r8d, [rax + 1]
movzx eax, byte [rsp + rax + 0x50]
movzx r8d, byte [rsp + r8 + 0x50]
mov byte [rbp + rdx], r8b
lea edx, [r9 - 1]
sub r9d, 2
mov byte [rbp + rdx], al
cmp ecx, 0x270f
ja 0x140001d58
cmp ecx, 0x3e7
ja 0x14000201c
add r15d, 0x30
mov byte [rbp], r15b
mov edx, r12d
mov r8, qword [rsp + 0x30]
mov rcx, qword [0x140030128]
call qword [sym.imp.USER32.dll_SetDlgItemTextA]
mov rcx, qword [rsp + 0x30]
cmp rcx, r13
je 0x140001de2
mov rax, qword [rsp + 0x40]
lea rdx, [rax + 1]
call fcn.140022260
mov rcx, qword [0x140030128]
call qword [sym.imp.USER32.dll_SetFocus]
mov rcx, qword [0x140030128]
mov dword [0x140030058], 0
lea rdx, str.epic1994clicker
call qword [sym.imp.USER32.dll_SetWindowTextA]
mov rbx, qword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x140001e27
mov ecx, 0xf
call rbx
mov ecx, dword [rdi]
call rsi
test ax, ax
jne 0x140001e20
jmp 0x140001a65
lea r14, [rsp + 0x30]
lea edx, [rbx + 2]
mov r8d, 0x2d
lea r13, [rsp + 0x40]
mov rcx, r14
mov qword [rsp + 0x30], r13
call fcn.14001e440
add rbp, qword [rsp + 0x30]
movabs rax, 0x3330323031303030
movabs rdx, 0x3730363035303430
mov qword [rsp + 0x50], rax
movabs rax, 0x3131303139303830
mov qword [rsp + 0x58], rdx
movabs rdx, 0x3531343133313231
mov qword [rsp + 0x60], rax
movabs rax, 0x3931383137313631
mov qword [rsp + 0x68], rdx
movabs rdx, 0x3332323231323032
mov qword [rsp + 0x70], rax
movabs rax, 0x3732363235323432
mov qword [rsp + 0x78], rdx
movabs rdx, 0x3133303339323832
mov qword [rsp + 0x80], rax
movabs rax, 0x3533343333333233
mov qword [rsp + 0x88], rdx
movabs rdx, 0x3933383337333633
mov qword [rsp + 0x90], rax
movabs rax, 0x3334323431343034
mov qword [rsp + 0x98], rdx
movabs rdx, 0x3734363435343434
mov qword [rsp + 0xa0], rax
movabs rax, 0x3135303539343834
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x3535343533353235
mov qword [rsp + 0xb0], rax
movabs rax, 0x3935383537353635
mov qword [rsp + 0xb8], rdx
movabs rdx, 0x3336323631363036
mov qword [rsp + 0xc0], rax
movabs rax, 0x3736363635363436
mov qword [rsp + 0xc8], rdx
movabs rdx, 0x3137303739363836
mov qword [rsp + 0xd0], rax
movabs rax, 0x3537343733373237
mov qword [rsp + 0xd8], rdx
movabs rdx, 0x3937383737373637
mov qword [rsp + 0xe0], rax
movabs rax, 0x3338323831383038
mov qword [rsp + 0xe8], rdx
movabs rdx, 0x3738363835383438
mov qword [rsp + 0xf0], rax
movabs rax, 0x3139303939383838
mov qword [rsp + 0xf8], rdx
movabs rdx, 0x3539343933393239
mov qword [rsp + 0x108], rdx
movabs rdx, 0x39393839373936
mov qword [rsp + 0x100], rax
movabs rax, 0x3935393439333932
mov qword [rsp + 0x109], rax
mov qword [rsp + 0x111], rdx
add r15d, r15d
lea eax, [r15 + 1]
movzx r15d, byte [rsp + r15 + 0x50]
movzx eax, byte [rsp + rax + 0x50]
mov byte [rbp + 1], al
jmp 0x140001db1
mov eax, 9
lea r9d, [rax - 1]
lea r13, [rsp + 0x40]
mov dword [rsp + 0x2c], r9d
lea r14, [rsp + 0x30]
mov qword [rsp + 0x30], r13
lea edx, [rax + rbx]
jmp 0x140001b7b
mov rdx, rbp
xor ecx, ecx
call sub.XINPUT1_3.dll_XInputGetState
mov edx, eax
test eax, eax
jne 0x140001a65
movzx eax, word [0x140030144]
mov word [0x140030130], ax
test ax, ax
je 0x140001a65
mov byte [0x14003005c], 1
test ah, 0x10
je 0x1400025bd
mov ebx, 0x1000
xor edi, edi
mov esi, 1
mov dword [0x140024074], 0x1000
lea eax, [rsi + 3]
add esi, 2
add edx, eax
lea r14, [rsp + 0x30]
lea r13, [rsp + 0x40]
mov r8d, 0x2d
mov edx, edx
mov rcx, r14
mov qword [rsp + 0x30], r13
call fcn.14001e440
add rdi, qword [rsp + 0x30]
movabs rax, 0x3330323031303030
movabs rdx, 0x3730363035303430
mov qword [rsp + 0x50], rax
movabs rax, 0x3131303139303830
mov qword [rsp + 0x58], rdx
movabs rdx, 0x3531343133313231
mov qword [rsp + 0x60], rax
movabs rax, 0x3931383137313631
mov qword [rsp + 0x68], rdx
movabs rdx, 0x3332323231323032
mov qword [rsp + 0x70], rax
movabs rax, 0x3732363235323432
mov qword [rsp + 0x78], rdx
movabs rdx, 0x3133303339323832
mov qword [rsp + 0x80], rax
movabs rax, 0x3533343333333233
mov qword [rsp + 0x88], rdx
movabs rdx, 0x3933383337333633
mov qword [rsp + 0x90], rax
movabs rax, 0x3334323431343034
mov qword [rsp + 0x98], rdx
movabs rdx, 0x3734363435343434
mov qword [rsp + 0xa0], rax
movabs rax, 0x3135303539343834
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x3535343533353235
mov qword [rsp + 0xb0], rax
movabs rax, 0x3935383537353635
mov qword [rsp + 0xb8], rdx
movabs rdx, 0x3336323631363036
mov qword [rsp + 0xc0], rax
movabs rax, 0x3736363635363436
mov qword [rsp + 0xc8], rdx
movabs rdx, 0x3137303739363836
mov qword [rsp + 0xd0], rax
movabs rax, 0x3537343733373237
mov qword [rsp + 0xd8], rdx
movabs rdx, 0x3937383737373637
mov qword [rsp + 0xe0], rax
movabs rax, 0x3338323831383038
mov qword [rsp + 0xe8], rdx
movabs rdx, 0x3738363835383438
mov qword [rsp + 0xf0], rax
movabs rax, 0x3139303939383838
mov qword [rsp + 0xf8], rdx
movabs rdx, 0x3539343933393239
mov qword [rsp + 0x108], rdx
movabs rdx, 0x39393839373936
mov qword [rsp + 0x100], rax
movabs rax, 0x3935393439333932
mov qword [rsp + 0x109], rax
mov qword [rsp + 0x111], rdx
mov edx, ebx
mov eax, ebx
imul rdx, rdx, 0x51eb851f
shr rdx, 0x25
imul ecx, edx, 0x64
sub eax, ecx
mov ecx, ebx
mov ebx, edx
mov edx, esi
add eax, eax
lea r8d, [rax + 1]
movzx eax, byte [rsp + rax + 0x50]
movzx r8d, byte [rsp + r8 + 0x50]
mov byte [rdi + rdx], r8b
lea edx, [rsi - 1]
sub esi, 2
mov byte [rdi + rdx], al
cmp ecx, 0x270f
ja 0x14000229a
cmp ecx, 0x3e7
ja 0x1400025a6
add ebx, 0x30
mov byte [rdi], bl
mov edx, r12d
mov r8, qword [rsp + 0x30]
mov rcx, qword [0x140030128]
call qword [sym.imp.USER32.dll_SetDlgItemTextA]
mov rcx, qword [rsp + 0x30]
cmp rcx, r13
je 0x140002318
mov rax, qword [rsp + 0x40]
lea rdx, [rax + 1]
call fcn.140022260
mov rcx, qword [0x140030128]
pxor xmm6, xmm6
call qword [sym.imp.USER32.dll_SetFocus]
mov rcx, qword [0x140030128]
mov dword [0x140030058], 0
lea rdx, str.epic1994clicker
call qword [sym.imp.USER32.dll_SetWindowTextA]
mov rbx, qword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x14000236a
movzx eax, word [0x140030144]
and eax, dword [0x140024074]
je 0x140001a65
mov ecx, 0xf
call rbx
xor ecx, ecx
mov rdx, rbp
movups xmmword [rbp], xmm6
call sub.XINPUT1_3.dll_XInputGetState
test eax, eax
jne 0x140001a65
jmp 0x140002350
mov r9d, 7
mov eax, 8
jmp 0x14000203f
test al, 0x40
je 0x140002764
xor edi, edi
mov ebx, 0x40
mov eax, 2
mov dword [0x140024074], 0x40
mov esi, 1
add edx, eax
lea r14, [rsp + 0x30]
lea r13, [rsp + 0x40]
mov r8d, 0x2d
mov edx, edx
mov rcx, r14
mov qword [rsp + 0x30], r13
call fcn.14001e440
add rdi, qword [rsp + 0x30]
movabs rax, 0x3330323031303030
movabs rdx, 0x3730363035303430
mov qword [rsp + 0x50], rax
movabs rax, 0x3131303139303830
mov qword [rsp + 0x58], rdx
movabs rdx, 0x3531343133313231
mov qword [rsp + 0x60], rax
movabs rax, 0x3931383137313631
mov qword [rsp + 0x68], rdx
movabs rdx, 0x3332323231323032
mov qword [rsp + 0x70], rax
movabs rax, 0x3732363235323432
mov qword [rsp + 0x78], rdx
movabs rdx, 0x3133303339323832
mov qword [rsp + 0x80], rax
movabs rax, 0x3533343333333233
mov qword [rsp + 0x88], rdx
movabs rdx, 0x3933383337333633
mov qword [rsp + 0x90], rax
movabs rax, 0x3334323431343034
mov qword [rsp + 0x98], rdx
movabs rdx, 0x3734363435343434
mov qword [rsp + 0xa0], rax
movabs rax, 0x3135303539343834
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x3535343533353235
mov qword [rsp + 0xb0], rax
movabs rax, 0x3935383537353635
mov qword [rsp + 0xb8], rdx
movabs rdx, 0x3336323631363036
mov qword [rsp + 0xc0], rax
movabs rax, 0x3736363635363436
mov qword [rsp + 0xc8], rdx
movabs rdx, 0x3137303739363836
mov qword [rsp + 0xd0], rax
movabs rax, 0x3537343733373237
mov qword [rsp + 0xd8], rdx
movabs rdx, 0x3937383737373637
mov qword [rsp + 0xe0], rax
movabs rax, 0x3338323831383038
mov qword [rsp + 0xe8], rdx
movabs rdx, 0x3738363835383438
mov qword [rsp + 0xf0], rax
movabs rax, 0x3139303939383838
mov qword [rsp + 0xf8], rdx
movabs rdx, 0x3539343933393239
mov qword [rsp + 0x108], rdx
movabs rdx, 0x39393839373936
mov qword [rsp + 0x100], rax
movabs rax, 0x3935393439333932
mov qword [rsp + 0x109], rax
mov qword [rsp + 0x111], rdx
cmp ebx, 0x63
ja 0x14000229a
add ebx, ebx
lea eax, [rbx + 1]
movzx ebx, byte [rsp + rbx + 0x50]
movzx eax, byte [rsp + rax + 0x50]
mov byte [rdi + 1], al
jmp 0x1400022e9
test ah, 0x20
jne 0x14000264d
test ah, 0x40
jne 0x140002692
test ax, ax
js 0x140002730
test ah, 1
jne 0x140002710
test ah, 2
jne 0x1400026d5
test al, 1
je 0x1400026bb
mov dword [0x140024074], 1
xor edi, edi
mov ebx, 1
lea r14, [rsp + 0x30]
lea r13, [rsp + 0x40]
add edx, 1
mov r8d, 0x2d
mov rcx, r14
mov qword [rsp + 0x30], r13
call fcn.14001e440
add rdi, qword [rsp + 0x30]
jmp 0x1400022e6
mov r9d, 2
mov eax, 3
jmp 0x14000203f
mov r9d, 3
mov eax, 4
jmp 0x14000203f
mov dword [0x140024074], 0x2000
mov ebx, 0x2000
xor edi, edi
mov esi, 1
jmp 0x1400020ac
lea r14, [rsp + 0x30]
lea edx, [rbx + 1]
mov r8d, 0x2d
lea r13, [rsp + 0x40]
mov rcx, r14
mov qword [rsp + 0x30], r13
call fcn.14001e440
add rbp, qword [rsp + 0x30]
jmp 0x140001dad
mov dword [0x140024074], 0x4000
mov ebx, 0x4000
xor edi, edi
mov eax, 5
lea esi, [rax - 1]
jmp 0x1400020b2
mov r9d, 5
jmp 0x140001b62
test al, 2
je 0x1400026f5
mov dword [0x140024074], 2
xor edi, edi
mov ebx, 2
jmp 0x140002603
mov dword [0x140024074], 0x200
xor edi, edi
mov ebx, 0x200
mov esi, 2
mov eax, 3
jmp 0x1400020b2
test al, 4
je 0x140002746
mov dword [0x140024074], 4
xor edi, edi
mov ebx, 4
jmp 0x140002603
xor edi, edi
mov ebx, 0x100
mov esi, 2
mov dword [0x140024074], 0x100
mov eax, 3
jmp 0x1400020b2
mov dword [0x140024074], 0x8000
mov ebx, 0x8000
xor edi, edi
jmp 0x1400026a3
test al, 8
je 0x140002392
mov dword [0x140024074], 8
xor edi, edi
mov ebx, 8
jmp 0x140002603
test al, 0x80
je 0x140002790
xor edi, edi
mov ebx, pe_nt_image_headers64
mov esi, 2
mov dword [0x140024074], 0x80
mov eax, 3
jmp 0x1400020b2
mov ebx, dword [0x140024074]
test ebx, ebx
jns 0x14000282f
neg ebx
mov edi, 1
mov edx, 1
cmp ebx, 9
jbe 0x140002603
cmp ebx, 0x63
jbe 0x14000283d
cmp ebx, 0x3e7
jbe 0x1400026e6
cmp ebx, 0x270f
jbe 0x14000265e
cmp ebx, 0x1869f
jbe 0x1400026a3
cmp ebx, 0xf423f
jbe 0x140002836
mov esi, 6
mov eax, 7
cmp ebx, 0x98967f
jbe 0x1400020b2
cmp ebx, 0x5f5e0ff
jbe 0x14000281b
cmp ebx, 0x3b9ac9ff
jbe 0x140002825
mov esi, 9
lea eax, [rsi + 1]
jmp 0x1400023b5
mov esi, 5
jmp 0x1400020ac
mov eax, 9
jmp 0x1400026a8
xor edi, edi
jmp 0x1400027aa
mov esi, 5
jmp 0x140002813
mov eax, 2
mov esi, 1
jmp 0x1400023b5