Function at 0x140001000
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x30
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Shotbot__F1__Ligar__F2__Desligar_
mov rsi, rax
call fcn.140001320
mov rcx, rax
lea rdx, [0x1400014f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.ReloadHack__F3__Ligar__F4__Desligar_
call fcn.140001320
mov rcx, rax
lea rdx, [0x1400014f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [0x1400014f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0xc
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Shotbot:_Desligado
call fcn.140001320
mov rcx, rax
lea rdx, [0x1400014f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.ReloadHack:_Desligado
call fcn.140001320
mov rcx, rax
lea rdx, [0x1400014f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor ebp, ebp
movabs r14, 0x346dc5d63886594b
nop
mov ecx, 0x4b
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x70
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001125
cmp byte [0x140005630], bpl
jne 0x140001125
mov edx, 0xa
mov byte [0x140005630], 1
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Shotbot:_Ligado
jmp 0x1400011c8
mov ecx, 0x71
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000115c
cmp byte [0x140005630], bpl
je 0x14000115c
mov edx, 0xc
mov byte [0x140005630], bpl
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Shotbot:_Desligado
jmp 0x1400011c8
mov ecx, 0x72
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001193
cmp byte [0x140005631], bpl
jne 0x140001193
mov edx, 0xa
mov byte [0x140005631], 1
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.ReloadHack:_Ligado
jmp 0x1400011c8
mov ecx, 0x73
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400011e4
cmp byte [0x140005631], bpl
je 0x1400011e4
mov edx, 0xc
mov byte [0x140005631], bpl
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.ReloadHack:_Desligado
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
lea rdx, [0x1400014f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
mov edi, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
mov ebx, eax
call qword [sym.imp.USER32.dll_GetDC]
mov rcx, rax
mov r8d, ebx
mov eax, edi
cdq
sub eax, edx
sar eax, 1
mov edx, eax
call qword [sym.imp.GDI32.dll_GetPixel]
mov ebx, eax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
mov rax, r14
imul rcx
sar rdx, 0xb
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
movzx ecx, byte [0x140005631]
test cl, cl
je 0x140001267
cmp ebx, 0xff
je 0x140001267
cmp ebx, 0xff00
je 0x140001267
lea rax, [rdx + 0x177]
mov qword [0x140005628], rax
jmp 0x14000126e
mov rax, qword [0x140005628]
sub rax, rdx
test rax, rax
jg 0x1400010e0
test cl, cl
je 0x1400012c5
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400012c5
xor edx, edx
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x20]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 0x40]
call qword [sym.imp.USER32.dll_mouse_event]
cmp byte [0x140005630], bpl
je 0x1400010e0
cmp ebx, 0xff
jne 0x1400010e0
xor edx, edx
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 2]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 4]
call qword [sym.imp.USER32.dll_mouse_event]
jmp 0x1400010e0