Function at 0x140089920
Capabilities:
Log keystrokes via polling

Disassembly:
sub rsp, 0x158
mov rax, qword [0x140158080]
xor rax, rsp
mov qword [rsp + 0x140], rax
lea rcx, [rsp + 0x88]
call fcn.140086fe0
mov qword [rsp + 0x70], rax
lea rdx, [0x140147ff4]
mov rcx, qword [rsp + 0x70]
call fcn.14009b580
mov byte [rsp + 0x30], al
lea rcx, [rsp + 0x88]
call fcn.140085cf0
movzx eax, byte [rsp + 0x30]
test eax, eax
je 0x140089ae8
movzx eax, byte [0x14016189d]
test eax, eax
je 0x140089ae8
xor eax, eax
cmp eax, 1
je 0x140089ae8
lea rcx, [rsp + 0xa8]
call fcn.140086fe0
mov qword [rsp + 0x78], rax
lea rdx, [0x140147ffc]
mov rcx, qword [rsp + 0x78]
call fcn.14009b580
movzx eax, al
test eax, eax
jne 0x1400899c8
mov dword [rsp + 0x34], 1
jmp 0x1400899d0
mov dword [rsp + 0x34], 0
movzx eax, byte [rsp + 0x34]
mov byte [rsp + 0x31], al
lea rcx, [rsp + 0xa8]
call fcn.140085cf0
movzx eax, byte [rsp + 0x31]
test eax, eax
je 0x1400899f4
jmp 0x140089ae8
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov dl, 0xb8
mov cl, 0x57
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 0x82
mov dl, 0xb8
mov cl, 0x57
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov dl, 0xb8
mov cl, 0x41
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 0x82
mov dl, 0xb8
mov cl, 0x41
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov dl, 0xb8
mov cl, 0x53
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 0x82
mov dl, 0xb8
mov cl, 0x53
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov dl, 0xb8
mov cl, 0x44
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 0x82
mov dl, 0xb8
mov cl, 0x44
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140089989
mov ecx, dword [0x140163248]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x140089c52
movzx eax, byte [0x14016218a]
test eax, eax
jne 0x140089b15
mov dword [rsp + 0x38], 1
jmp 0x140089b1d
mov dword [rsp + 0x38], 0
movzx eax, byte [rsp + 0x38]
mov byte [0x14016218a], al
movzx eax, byte [0x14016218a]
cmp eax, 1
jne 0x140089bb0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161cde], 0
mov byte [0x140162188], 0
mov dword [0x14016324c], 1
lea rax, [0x140148004]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x140089ba0
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140089c52
movzx eax, byte [0x14016218a]
test eax, eax
jne 0x140089c52
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161f1f], 0
mov byte [0x14016189b], 0
mov byte [0x14016189c], 0
mov byte [0x140161f1a], 0
mov byte [0x14016189a], 0
mov dword [0x14016324c], 0
lea rax, [0x14014800c]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x140089c47
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1401626dc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x140089dbc
movzx eax, byte [0x140161cd8]
test eax, eax
jne 0x140089c7f
mov dword [rsp + 0x3c], 1
jmp 0x140089c87
mov dword [rsp + 0x3c], 0
movzx eax, byte [rsp + 0x3c]
mov byte [0x140161cd8], al
movzx eax, byte [0x140161cd8]
cmp eax, 1
jne 0x140089d1a
mov byte [0x14016218a], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161cde], 0
mov byte [0x140162188], 0
mov dword [0x14016324c], 2
lea rax, [0x140148014]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x140089d0a
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140089dbc
movzx eax, byte [0x140161cd8]
test eax, eax
jne 0x140089dbc
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161f1f], 0
mov byte [0x14016189b], 0
mov byte [0x14016189c], 0
mov byte [0x140161f1a], 0
mov byte [0x14016189a], 0
mov dword [0x14016324c], 0
lea rax, [0x14014801c]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x140089db1
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1401625c8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x140089f26
movzx eax, byte [0x140161cdc]
test eax, eax
jne 0x140089de9
mov dword [rsp + 0x40], 1
jmp 0x140089df1
mov dword [rsp + 0x40], 0
movzx eax, byte [rsp + 0x40]
mov byte [0x140161cdc], al
movzx eax, byte [0x140161cdc]
cmp eax, 1
jne 0x140089e84
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161899], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161cde], 0
mov byte [0x140162188], 0
lea rax, [0x140148024]
mov qword [0x1401580f8], rax
mov dword [0x14016324c], 3
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x140089e74
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140089f26
movzx eax, byte [0x140161cdc]
test eax, eax
jne 0x140089f26
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161f1f], 0
mov byte [0x14016189b], 0
mov byte [0x14016189c], 0
mov byte [0x140161f1a], 0
mov byte [0x14016189a], 0
mov dword [0x14016324c], 0
lea rax, [0x140148028]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x140089f1b
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x140162298]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14008a090
movzx eax, byte [0x140161cda]
test eax, eax
jne 0x140089f53
mov dword [rsp + 0x44], 1
jmp 0x140089f5b
mov dword [rsp + 0x44], 0
movzx eax, byte [rsp + 0x44]
mov byte [0x140161cda], al
movzx eax, byte [0x140161cda]
cmp eax, 1
jne 0x140089fee
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161cde], 0
mov byte [0x140162188], 0
mov dword [0x14016324c], 4
lea rax, [0x140148030]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x140089fde
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14008a090
movzx eax, byte [0x140161cda]
test eax, eax
jne 0x14008a090
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161f1f], 0
mov byte [0x14016189b], 0
mov byte [0x14016189c], 0
mov byte [0x140161f1a], 0
mov byte [0x14016189a], 0
mov dword [0x14016324c], 0
lea rax, [0x140148034]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a085
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x140162c6c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14008a1fa
movzx eax, byte [0x140161899]
test eax, eax
jne 0x14008a0bd
mov dword [rsp + 0x48], 1
jmp 0x14008a0c5
mov dword [rsp + 0x48], 0
movzx eax, byte [rsp + 0x48]
mov byte [0x140161899], al
movzx eax, byte [0x140161899]
cmp eax, 1
jne 0x14008a158
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161cde], 0
mov byte [0x140162188], 0
mov dword [0x14016324c], 5
lea rax, str.TOMMY
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a148
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14008a1fa
movzx eax, byte [0x140161899]
test eax, eax
jne 0x14008a1fa
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161f1f], 0
mov byte [0x14016189b], 0
mov byte [0x14016189c], 0
mov byte [0x140161f1a], 0
mov byte [0x14016189a], 0
mov dword [0x14016324c], 0
lea rax, [0x140148044]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a1ef
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x14016229c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14008a364
movzx eax, byte [0x140161cd9]
test eax, eax
jne 0x14008a227
mov dword [rsp + 0x4c], 1
jmp 0x14008a22f
mov dword [rsp + 0x4c], 0
movzx eax, byte [rsp + 0x4c]
mov byte [0x140161cd9], al
movzx eax, byte [0x140161cd9]
cmp eax, 1
jne 0x14008a2c2
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161f19], 0
mov byte [0x140161cda], 0
mov byte [0x140161cde], 0
mov byte [0x140162188], 0
mov dword [0x14016324c], 6
lea rax, str.SEMI
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a2b2
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14008a364
movzx eax, byte [0x140161cd9]
test eax, eax
jne 0x14008a364
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161f1f], 0
mov byte [0x14016189b], 0
mov byte [0x14016189c], 0
mov byte [0x140161f1a], 0
mov byte [0x14016189a], 0
mov dword [0x14016324c], 0
lea rax, [0x140148054]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a359
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x140162fdc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14008a4ce
movzx eax, byte [0x140161f19]
test eax, eax
jne 0x14008a391
mov dword [rsp + 0x50], 1
jmp 0x14008a399
mov dword [rsp + 0x50], 0
movzx eax, byte [rsp + 0x50]
mov byte [0x140161f19], al
movzx eax, byte [0x140161f19]
cmp eax, 1
jne 0x14008a42c
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161cd9], 0
mov byte [0x140161cda], 0
mov byte [0x140161cde], 0
mov byte [0x140162188], 0
mov dword [0x14016324c], 7
lea rax, [0x14014805c]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a41c
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14008a4ce
movzx eax, byte [0x140161f19]
test eax, eax
jne 0x14008a4ce
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161f1f], 0
mov byte [0x14016189b], 0
mov byte [0x14016189c], 0
mov byte [0x140161f1a], 0
mov byte [0x14016189a], 0
mov dword [0x14016324c], 0
lea rax, [0x140148064]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a4c3
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x140162fd8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14008a638
movzx eax, byte [0x140161cde]
test eax, eax
jne 0x14008a4fb
mov dword [rsp + 0x54], 1
jmp 0x14008a503
mov dword [rsp + 0x54], 0
movzx eax, byte [rsp + 0x54]
mov byte [0x140161cde], al
movzx eax, byte [0x140161cde]
cmp eax, 1
jne 0x14008a596
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161cd9], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140162188], 0
mov dword [0x14016324c], 8
lea rax, [0x14014806c]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a586
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14008a638
movzx eax, byte [0x140161cde]
test eax, eax
jne 0x14008a638
mov byte [0x14016218a], 0
mov byte [0x140161cd8], 0
mov byte [0x140161cdc], 0
mov byte [0x140161899], 0
mov byte [0x140161cda], 0
mov byte [0x140161f19], 0
mov byte [0x140161cd9], 0
mov byte [0x140161f1f], 0
mov byte [0x14016189b], 0
mov byte [0x14016189c], 0
mov byte [0x140161f1a], 0
mov byte [0x14016189a], 0
mov dword [0x14016324c], 0
lea rax, [0x140148074]
mov qword [0x1401580f8], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a62d
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x140162b58]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14008a724
movzx eax, byte [0x140161f1f]
test eax, eax
jne 0x14008a665
mov dword [rsp + 0x58], 1
jmp 0x14008a66d
mov dword [rsp + 0x58], 0
movzx eax, byte [rsp + 0x58]
mov byte [0x140161f1f], al
movzx eax, byte [0x140161f1f]
cmp eax, 1
jne 0x14008a6da
mov byte [0x14016189b], 0
mov byte [0x14016189c], 0
mov byte [0x140161f1a], 0
lea rax, [0x14014807c]
mov qword [0x140158108], rax
mov dword [0x140162b5c], 3
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a6cd
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14008a724
movzx eax, byte [0x140161f1f]
test eax, eax
jne 0x14008a724
lea rax, [0x140148084]
mov qword [0x140158108], rax
mov dword [0x140162b5c], 0
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a719
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1401625cc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14008a810
movzx eax, byte [0x14016189b]
test eax, eax
jne 0x14008a751
mov dword [rsp + 0x5c], 1
jmp 0x14008a759
mov dword [rsp + 0x5c], 0
movzx eax, byte [rsp + 0x5c]
mov byte [0x14016189b], al
movzx eax, byte [0x14016189b]
cmp eax, 1
jne 0x14008a7c6
mov byte [0x140161f1f], 0
mov byte [0x14016189c], 0
mov byte [0x140161f1a], 0
mov dword [0x140162b5c], 1
lea rax, [0x14014808c]
mov qword [0x140158108], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a7b9
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14008a810
movzx eax, byte [0x14016189b]
test eax, eax
jne 0x14008a810
mov dword [0x140162b5c], 0
lea rax, [0x140148090]
mov qword [0x140158108], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a805
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x140162c68]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14008a8fc
movzx eax, byte [0x14016189c]
test eax, eax
jne 0x14008a83d
mov dword [rsp + 0x60], 1
jmp 0x14008a845
mov dword [rsp + 0x60], 0
movzx eax, byte [rsp + 0x60]
mov byte [0x14016189c], al
movzx eax, byte [0x14016189c]
cmp eax, 1
jne 0x14008a8b2
mov byte [0x140161f1f], 0
mov byte [0x14016189b], 0
mov byte [0x140161f1a], 0
mov dword [0x140162b5c], 4
lea rax, [0x140148098]
mov qword [0x140158108], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a8a5
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14008a8fc
movzx eax, byte [0x14016189c]
test eax, eax
jne 0x14008a8fc
lea rax, [0x1401480a0]
mov qword [0x140158108], rax
mov dword [0x140162b5c], 0
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a8f1
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x14016218c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14008a9e8
movzx eax, byte [0x140161f1a]
test eax, eax
jne 0x14008a929
mov dword [rsp + 0x64], 1
jmp 0x14008a931
mov dword [rsp + 0x64], 0
movzx eax, byte [rsp + 0x64]
mov byte [0x140161f1a], al
movzx eax, byte [0x140161f1a]
cmp eax, 1
jne 0x14008a99e
mov byte [0x140161f1f], 0
mov byte [0x14016189b], 0
mov byte [0x14016189c], 0
mov dword [0x140162b5c], 2
lea rax, [0x1401480a8]
mov qword [0x140158108], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a991
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14008a9e8
movzx eax, byte [0x140161f1a]
test eax, eax
jne 0x14008a9e8
lea rax, [0x1401480ac]
mov qword [0x140158108], rax
mov dword [0x140162b5c], 0
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008a9dd
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x140162ea8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14008aabf
movzx eax, byte [0x14016189a]
test eax, eax
jne 0x14008aa15
mov dword [rsp + 0x68], 1
jmp 0x14008aa1d
mov dword [rsp + 0x68], 0
movzx eax, byte [rsp + 0x68]
mov byte [0x14016189a], al
movzx eax, byte [0x14016189a]
cmp eax, 1
jne 0x14008aa75
mov dword [0x140162eac], 1
lea rax, [0x1401480b8]
mov qword [0x140158110], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008aa68
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14008aabf
movzx eax, byte [0x14016189a]
test eax, eax
jne 0x14008aabf
mov dword [0x140162eac], 0
lea rax, [0x1401480c4]
mov qword [0x140158110], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008aab4
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1401626d8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x14008ab2f
movzx eax, byte [0x140161f1e]
cmp eax, 1
jne 0x14008ab2f
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 2
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, reloc.WLDAP32.dll_Ordinal_30
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 4
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, reloc.WLDAP32.dll_Ordinal_30
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1401630ec]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x14008ac39
lea rcx, [rsp + 0xc8]
call fcn.140086fe0
mov qword [rsp + 0x80], rax
lea rdx, str.Rust
mov rcx, qword [rsp + 0x80]
call fcn.14009b580
mov byte [rsp + 0x32], al
lea rcx, [rsp + 0xc8]
call fcn.140085cf0
movzx eax, byte [rsp + 0x32]
test eax, eax
je 0x14008ac39
cmp dword [0x1401630ec], 0
je 0x14008ac39
mov eax, Ordinal_41
imul rax, rax, 0
mov dword [rsp + rax + 0xf0], 1
mov eax, Ordinal_41
imul rax, rax, 0
mov ecx, reloc.WS2_32.dll_recv
mov word [rsp + rax + 0xf8], cx
mov eax, Ordinal_41
imul rax, rax, 0
mov dword [rsp + rax + 0xfc], 0
mov eax, Ordinal_41
imul rax, rax, 1
mov dword [rsp + rax + 0xf0], 1
mov eax, Ordinal_41
imul rax, rax, 1
mov ecx, 0x57
mov word [rsp + rax + 0xf8], cx
mov eax, Ordinal_41
imul rax, rax, 1
mov dword [rsp + rax + 0xfc], 0
mov r8d, Ordinal_45
lea rdx, [rsp + 0xf0]
mov ecx, 2
call qword [sym.imp.USER32.dll_SendInput]
xor al, al
jmp 0x14008accc
mov ecx, dword [0x140162d98]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14008acca
mov byte [0x140162188], 0
mov byte [0x14016189a], 0
mov dword [0x14016324c], 0
mov dword [0x140162b5c], 0
mov dword [0x140162eac], 0
lea rax, [0x1401480d4]
mov qword [0x1401580f8], rax
lea rax, [0x1401480dc]
mov qword [0x140158108], rax
lea rax, [0x1401480e4]
mov qword [0x140158110], rax
movzx eax, byte [0x14016189f]
cmp eax, 1
jne 0x14008acbf
mov edx, 0x91
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
xor al, al
mov rcx, qword [rsp + 0x140]
xor rcx, rsp
call fcn.1400ff530
add rsp, 0x158
ret