Function at 0x1400070a0
Capabilities:
Create thread
Log keystrokes via polling
Terminate process

Disassembly:
push rbx
sub rsp, 0x50
mov ecx, dword [0x1400830a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400070dd
cmp byte [0x140083b40], 0
jne 0x1400070dd
cmp byte [0x140083056], 0
jne 0x1400070dd
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x140083b58], rax
mov byte [0x140083b40], 1
mov ecx, dword [0x1400830a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor ebx, ebx
test ax, ax
je 0x140007184
cmp byte [0x140083b40], bl
je 0x140007184
cmp byte [0x140083056], bl
jne 0x140007184
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140083b58]
cmp rax, 0x1f4
jb 0x140007161
cmp byte [0x140083b42], bl
jne 0x140007161
mov ecx, dword [0x1400830bc]
lea r8, [0x14006c470]
mov eax, dword [0x1400830c0]
xor r9d, r9d
mov dword [0x1400830c0], ecx
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rbx
mov dword [0x1400830bc], eax
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [0x140083b42], 1
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140083b58]
cmp rax, 0x1f4
jae 0x140007184
cmp byte [0x140083b42], bl
je 0x140007184
mov byte [0x140083b42], bl
mov ecx, dword [0x1400830a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x1400071f7
cmp byte [0x140083b40], bl
je 0x1400071f7
cmp byte [0x140083056], bl
jne 0x1400071f7
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140083b58]
cmp rax, 0x1f4
jae 0x1400071f1
cmp byte [0x1400830ad], bl
lea r8, [0x14006c490]
mov qword [rsp + 0x28], rbx
sete al
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov byte [0x1400830ad], al
xor edx, edx
xor ecx, ecx
test al, al
jne 0x1400071eb
lea r8, [0x14006c4b0]
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [0x140083b40], bl
mov ecx, dword [0x1400830a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140007217
cmp byte [0x140083056], bl
je 0x140007217
mov byte [0x140083b40], 1
mov ecx, dword [0x1400830a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x140007244
cmp byte [0x140083b40], bl
je 0x140007244
cmp byte [0x140083056], bl
je 0x140007244
mov byte [0x140083056], bl
mov byte [0x140083b40], bl
mov ecx, dword [0x140083148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140007279
cmp byte [0x140083b44], bl
jne 0x140007279
cmp byte [0x140083056], bl
jne 0x140007279
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x140083b58], rax
mov byte [0x140083b44], 1
mov ecx, dword [0x140083148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000731e
cmp byte [0x140083b44], bl
je 0x14000731e
cmp byte [0x140083056], bl
jne 0x14000731e
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140083b58]
cmp rax, 0x1f4
jb 0x1400072fb
cmp byte [0x140083b42], bl
jne 0x1400072fb
mov ecx, dword [0x14008315c]
lea r8, [0x14006c470]
mov eax, dword [0x140083160]
xor r9d, r9d
mov dword [0x140083160], ecx
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rbx
mov dword [0x14008315c], eax
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [0x140083b42], 1
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140083b58]
cmp rax, 0x1f4
jae 0x14000731e
cmp byte [0x140083b42], bl
je 0x14000731e
mov byte [0x140083b42], bl
mov ecx, dword [0x140083148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x140007391
cmp byte [0x140083b44], bl
je 0x140007391
cmp byte [0x140083056], bl
jne 0x140007391
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140083b58]
cmp rax, 0x1f4
jae 0x14000738b
cmp byte [0x14008314d], bl
lea r8, [0x14006c490]
mov qword [rsp + 0x28], rbx
sete al
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov byte [0x14008314d], al
xor edx, edx
xor ecx, ecx
test al, al
jne 0x140007385
lea r8, [0x14006c4b0]
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [0x140083b44], bl
mov ecx, dword [0x140083148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400073b1
cmp byte [0x140083056], bl
je 0x1400073b1
mov byte [0x140083b44], 1
mov ecx, dword [0x140083148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x1400073de
cmp byte [0x140083b44], bl
je 0x1400073de
cmp byte [0x140083056], bl
je 0x1400073de
mov byte [0x140083056], bl
mov byte [0x140083b44], bl
mov ecx, dword [0x140083058]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140007406
cmp byte [0x140083b45], bl
jne 0x140007406
cmp byte [0x140083056], bl
jne 0x140007406
mov byte [0x140083b45], 1
mov ecx, dword [0x140083058]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14000743a
cmp byte [0x140083b45], bl
je 0x14000743a
cmp byte [0x140083056], bl
jne 0x14000743a
cmp byte [0x140083055], bl
mov byte [0x140083b45], bl
sete byte [0x140083055]
mov ecx, dword [0x140083058]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000745a
cmp byte [0x140083056], bl
je 0x14000745a
mov byte [0x140083b45], 1
mov ecx, dword [0x140083058]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x140007487
cmp byte [0x140083b45], bl
je 0x140007487
cmp byte [0x140083056], bl
je 0x140007487
mov byte [0x140083056], bl
mov byte [0x140083b45], bl
mov ecx, dword [0x14008305c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400074bc
cmp byte [0x140083b43], bl
jne 0x1400074bc
cmp byte [0x140083056], bl
jne 0x1400074bc
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x140083b58], rax
mov byte [0x140083b43], 1
mov ecx, dword [0x14008305c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140007588
cmp byte [0x140083b43], bl
je 0x140007588
cmp byte [0x140083056], bl
jne 0x140007588
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x140083b58]
cmp rax, 0x1f4
jb 0x140007588
lea rdx, str.C:YoClicker2.0Lconfig.cfg
lea rcx, [rsp + 0x30]
call fcn.1400076e0
mov rdx, rax
lea rcx, [0x1400830a0]
call fcn.140003620
lea rdx, str.C:YoClicker2.0Rconfig.cfg
lea rcx, [rsp + 0x30]
call fcn.1400076e0
mov rdx, rax
lea rcx, [0x140083140]
call fcn.140003620
lea rdx, str.C:YoClicker2.0Sconfig.cfg
lea rcx, [rsp + 0x30]
call fcn.1400076e0
mov rdx, rax
call fcn.14006c4d0
lea rdx, str.C:YoClicker2.0Mconfig.cfg
lea rcx, [rsp + 0x30]
call fcn.1400076e0
mov rdx, rax
call fcn.14006c190
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, dword [0x14008305c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x1400075af
cmp byte [0x140083b43], bl
je 0x1400075af
cmp byte [0x140083056], bl
jne 0x1400075af
mov byte [0x140083b43], bl
mov ecx, dword [0x14008305c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400075cf
cmp byte [0x140083056], bl
je 0x1400075cf
mov byte [0x140083b43], 1
mov ecx, dword [0x14008305c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x1400075fc
cmp byte [0x140083b43], bl
je 0x1400075fc
cmp byte [0x140083056], bl
je 0x1400075fc
mov byte [0x140083056], bl
mov byte [0x140083b43], bl
add rsp, 0x50
pop rbx
ret