Function at 0x140001290
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x60
mov rax, qword [0x140007010]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rsi, rax
lea rdx, str.Russian
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xor ebp, ebp
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], bpl
lea edx, [rbp + 2]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x140004460]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002170
lea edx, [rbp + 4]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x38]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140002340
lea rcx, [rsp + 0x38]
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x50]
cmp rdi, 0x10
cmovae rcx, rbx
mov r8, qword [rsp + 0x48]
cmp r8, 6
jne 0x140001f94
lea rdx, str.123123
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140001f94
lea edx, [rbp + 2]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x140004480]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002170
mov rcx, rax
lea rdx, [0x140002530]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140004498]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002170
mov rcx, rax
lea rdx, [0x140002530]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea edx, [rbp + 2]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400044ac]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002170
lea edx, [rbp + 4]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.NinjaBridging
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002170
mov rcx, rax
lea rdx, [0x140002530]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea edx, [rbp + 2]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400044c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002170
lea edx, [rbp + 4]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Fake_Andromeda
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002170
mov rcx, rax
lea rdx, [0x140002530]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea edx, [rbp + 2]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400044d8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002170
lea edx, [rbp + 4]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.WTF_Bridge_v1
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002170
mov rcx, rax
lea rdx, [0x140002530]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea edx, [rbp + 2]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400044f0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002170
lea edx, [rbp + 4]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.WTF_Bridge_v2
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002170
mov rcx, rax
lea rdx, [0x140002530]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea edx, [rbp + 2]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x140004508]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002170
lea edx, [rbp + 4]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
nop word [rax + rax]
cmp dword [rsp + 0x30], 1
jne 0x1400015de
mov ecx, 0x52
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400015de
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x53
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0xe6
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x53
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
cmp dword [rsp + 0x30], 2
jne 0x140001753
mov ecx, 0x52
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001753
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0xfffffcae
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0xfffffcae
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x53
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0xe6
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x53
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0x352
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0x352
call qword [sym.imp.USER32.dll_mouse_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
cmp dword [rsp + 0x30], 3
jne 0x1400018bd
mov ecx, 0x52
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400018bd
mov ecx, 0x52
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400018bd
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
mov edx, 0x258
lea ecx, [r9 + 1]
mov r8d, 0xfffffce0
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x44
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0xe6
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x5a
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x44
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
mov edx, 0xfffffda8
lea ecx, [r9 + 1]
mov r8d, 0x320
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
cmp dword [rsp + 0x30], 4
jne 0x140001e1a
mov ecx, 0x52
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001e1a
mov ecx, 0x52
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001a27
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
mov edx, 0x258
lea ecx, [r9 + 1]
mov r8d, 0xfffffce0
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x44
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0xe6
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x5a
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x44
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
mov edx, 0xfffffda8
lea ecx, [r9 + 1]
mov r8d, 0x320
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x52
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001b46
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
mov edx, 0xfffffda8
lea ecx, [r9 + 1]
mov r8d, 0xfffffce0
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x41
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0xe6
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x5a
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x41
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
mov edx, 0x258
lea ecx, [r9 + 1]
mov r8d, 0x320
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x52
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001cb0
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0xfffff9f2
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0xfffff9f2
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x53
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0xe6
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x5a
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x53
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0x60e
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0x60e
call qword [sym.imp.USER32.dll_mouse_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x52
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001e1a
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0xfffffcae
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0xfffffcae
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x53
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0xe6
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x5a
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x53
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0x352
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0x352
call qword [sym.imp.USER32.dll_mouse_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
cmp dword [rsp + 0x30], 5
jne 0x140001530
mov ecx, 0x52
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001530
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0xfffff9f2
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0xfffff9f2
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x10
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x53
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0xe6
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x5a
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x53
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
lea r8d, [r9 + 2]
mov dl, 0x39
mov cl, 0x10
call qword [sym.imp.USER32.dll_keybd_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0x60e
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor edx, edx
lea ecx, [rdx + 1]
mov r8d, 0x60e
call qword [sym.imp.USER32.dll_mouse_event]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x18]
call qword [sym.imp.USER32.dll_mouse_event]
jmp 0x140001530
cmp rdi, 0x10
jb 0x140001fce
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140001fc6
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001fc6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14000283c
xor eax, eax
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1400027e0
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x60
pop rdi
ret