Function at 0x1400d86e0
Capabilities:
Log keystrokes via polling

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x5e0
lea rdx, [0x1401066b8]
lea rcx, [rsp + 0x498]
call fcn.1400ad1a0
lea rcx, [rsp + 0x498]
call fcn.1400b71a0
lea rcx, [rsp + 0x498]
call fcn.1400b0430
lea rcx, [rsp + 0x160]
call fcn.1400b6ba0
lea rdx, [0x14010441d]
lea rcx, [rsp + 0x160]
call fcn.140081630
movzx eax, al
test eax, eax
je 0x1400d8766
lea rdx, str.HTTP_request_for_latest_version_failed_
lea rcx, [rsp + 0x160]
call fcn.1400b12e0
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x558]
call fcn.1400be5e0
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.1400b11c0
lea rcx, [rsp + 0x558]
call fcn.1400b0430
lea rdx, str.2.9.5
lea rcx, [rsp + 0x208]
call fcn.1400ad1a0
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x160]
call fcn.140081600
movzx eax, al
test eax, eax
jne 0x1400d87cf
mov byte [0x140145c88], 1
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x160]
call fcn.140081600
movzx eax, al
test eax, eax
jne 0x1400d8a1f
movzx eax, byte [0x140145d39]
test eax, eax
jne 0x1400d8a1f
lea rcx, [rsp + 0x80]
call fcn.14004e6c0
mov qword [rsp + 0x190], rax
lea rdx, [rsp + 0x460]
lea rcx, [rsp + 0x160]
call fcn.1400ce4b0
mov rax, qword [rax]
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x198], rax
lea rdx, [rsp + 0x3f8]
lea rcx, [rsp + 0x160]
call fcn.1400c98f0
mov rax, qword [rax]
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x1a0], rax
mov r9, qword [rsp + 0x190]
mov r8, qword [rsp + 0x198]
mov rdx, qword [rsp + 0x1a0]
lea rcx, [rsp + 0x4b8]
call fcn.1400802c0
lea rcx, [rsp + 0x81]
call fcn.14004e6c0
mov qword [rsp + 0x1b8], rax
lea rdx, [rsp + 0x468]
lea rcx, [rsp + 0x208]
call fcn.1400ce4b0
mov rax, qword [rax]
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x1c0], rax
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x208]
call fcn.1400c98f0
mov rax, qword [rax]
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x1c8], rax
mov r9, qword [rsp + 0x1b8]
mov r8, qword [rsp + 0x1c0]
mov rdx, qword [rsp + 0x1c8]
lea rcx, [rsp + 0x538]
call fcn.1400802c0
lea r8, [rsp + 0x4b8]
lea rdx, str.Your_Version_is_Outdated__The_latest_version_is:
lea rcx, [rsp + 0x5b8]
call fcn.140081d00
lea r8, str.._Your_version_is:
mov rdx, rax
lea rcx, [rsp + 0x598]
call fcn.140081cb0
lea r8, [rsp + 0x538]
mov rdx, rax
lea rcx, [rsp + 0x578]
call fcn.140081c60
lea r8, str..__nDo_you_understand_this__If_you_press_yes__this_wont_show_up_again.
mov rdx, rax
lea rcx, [rsp + 0x478]
call fcn.140081cb0
lea rcx, [rsp + 0x578]
call fcn.1400b0460
lea rcx, [rsp + 0x598]
call fcn.1400b0460
lea rcx, [rsp + 0x5b8]
call fcn.1400b0460
lea rcx, [rsp + 0x478]
call fcn.1400c9bd0
mov r9d, 0x34
lea r8, str.Update_Notification
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov dword [rsp + 0x12c], eax
cmp dword [rsp + 0x12c], 6
jne 0x1400d89f8
mov byte [0x140145d39], 1
lea rcx, [rsp + 0x478]
call fcn.1400b0460
lea rcx, [rsp + 0x538]
call fcn.1400b0460
lea rcx, [rsp + 0x4b8]
call fcn.1400b0460
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x158], rax
lea rdx, str.NtSuspendProcess
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x78], rax
lea rdx, str.NtResumeProcess
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x70], rax
lea rdx, [0x1400be3d0]
lea rcx, [rsp + 0x450]
call fcn.14007f190
lea rdx, [0x1400b70e0]
lea rcx, [rsp + 0x440]
call fcn.14007f190
lea rdx, [0x1400be4b0]
lea rcx, [rsp + 0x430]
call fcn.14007f190
lea rdx, [0x1400be300]
lea rcx, [rsp + 0x420]
call fcn.14007f190
lea rdx, [0x1400b6ff0]
lea rcx, [rsp + 0x410]
call fcn.14007f190
lea rdx, [0x1400be720]
lea rcx, [rsp + 0x400]
call fcn.14007f190
lea rdx, [0x1400b8a90]
lea rcx, [rsp + 0x1f8]
call fcn.14007f190
call fcn.1400b6a60
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
call fcn.1400b67c0
mov qword [rsp + 0x58], rax
mov byte [rsp + 0x43], 0
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x46], 0
mov byte [rsp + 0x44], 0
mov byte [rsp + 0x45], 0
mov byte [rsp + 0x47], 0
mov byte [rsp + 0x41], 0
mov byte [rsp + 0x48], 0
mov byte [rsp + 0x49], 0
mov byte [rsp + 0x4c], 0
mov byte [rsp + 0x4d], 0
mov byte [rsp + 0x4a], 0
mov byte [rsp + 0x4b], 0
lea rcx, [rsp + 0x90]
call fcn.1400d24e0
lea rcx, [rsp + 0x150]
call fcn.1400d24e0
lea rcx, [rsp + 0x258]
call fcn.1400d24e0
movzx eax, byte [0x140145b6f]
test eax, eax
jne 0x1400da3e1
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d8dc9
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d8dc9
mov eax, 1
imul rax, rax, 0
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d8dc9
mov ecx, dword [0x140144e44]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d8beb
mov byte [rsp + 0x4e], 1
jmp 0x1400d8bf0
mov byte [rsp + 0x4e], 0
movzx eax, byte [rsp + 0x4e]
mov byte [rsp + 0x42], al
movzx eax, byte [0x140145c82]
test eax, eax
je 0x1400d8c81
movzx eax, byte [rsp + 0x42]
test eax, eax
je 0x1400d8c7f
movzx eax, byte [0x140145d38]
test eax, eax
jne 0x1400d8c7f
movzx eax, byte [rsp + 0x40]
test eax, eax
jne 0x1400d8c2e
mov dword [rsp + 0x84], 1
jmp 0x1400d8c39
mov dword [rsp + 0x84], 0
movzx eax, byte [rsp + 0x84]
mov byte [rsp + 0x40], al
movzx r9d, byte [rsp + 0x40]
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be590
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x1400d8c7f
lea rcx, [rsp + 0x260]
call fcn.1400d24e0
mov rax, qword [rax]
mov qword [0x140145c70], rax
jmp 0x1400d8ced
movzx eax, byte [rsp + 0x42]
test eax, eax
je 0x1400d8cc8
movzx eax, byte [rsp + 0x40]
test eax, eax
jne 0x1400d8cc6
mov r9b, 1
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be590
mov byte [rsp + 0x40], 1
lea rcx, [rsp + 0x268]
call fcn.1400d24e0
mov rax, qword [rax]
mov qword [0x140145c70], rax
jmp 0x1400d8ced
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x1400d8ced
xor r9d, r9d
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be590
mov byte [rsp + 0x40], 0
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x1400d8dbe
lea rcx, [rsp + 0x270]
call fcn.1400d24e0
lea r8, [0x140145c70]
mov rdx, rax
lea rcx, [rsp + 0x278]
call fcn.1400818a0
mov rdx, rax
lea rcx, [rsp + 0x280]
call fcn.1400a0f20
mov rcx, rax
call fcn.14008fd30
mov qword [rsp + 0x1d0], rax
cvtsi2ss xmm0, qword [rsp + 0x1d0]
movss xmm1, dword [0x140134140]
mulss xmm1, dword [0x1400e6f48]
comiss xmm0, xmm1
jb 0x1400d8dbe
xor r9d, r9d
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be590
lea rdx, [0x140134144]
lea rcx, [rsp + 0x288]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov r9b, 1
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be590
lea rcx, [rsp + 0x290]
call fcn.1400d24e0
mov rax, qword [rax]
mov qword [0x140145c70], rax
movzx eax, byte [rsp + 0x42]
mov byte [0x140145d38], al
mov ecx, dword [0x140144e38]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d8e3c
mov rcx, qword [rsp + 0x58]
call fcn.1400b6f60
movzx eax, al
test eax, eax
je 0x1400d8e3c
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d8e3c
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d8e3c
mov eax, 1
imul rax, rax, 1
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d8e3c
movzx eax, byte [rsp + 0x43]
test eax, eax
jne 0x1400d8e3a
mov dl, 1
lea rcx, [0x140145c8a]
call fcn.1400b1090
mov byte [rsp + 0x43], 1
jmp 0x1400d8e4f
mov byte [rsp + 0x43], 0
xor edx, edx
lea rcx, [0x140145c8a]
call fcn.1400b1090
mov ecx, dword [0x140145d98]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d8f09
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d8f09
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d8f09
mov eax, 1
imul rax, rax, 5
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d8f09
movzx eax, byte [rsp + 0x44]
test eax, eax
jne 0x1400d8f07
mov eax, dword [0x140145d8c]
cmp dword [0x140145d98], eax
jne 0x1400d8ec2
movzx ecx, word [0x140145d98]
call fcn.1400b89b0
movzx ecx, word [0x140145d8c]
call fcn.1400b6d80
mov dword [rsp + 0x130], 6
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x298]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx ecx, word [0x140145d8c]
call fcn.1400b89b0
mov byte [rsp + 0x44], 1
jmp 0x1400d8f0e
mov byte [rsp + 0x44], 0
mov ecx, dword [0x140144e4c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d9077
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d9077
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d9077
mov eax, 1
imul rax, rax, 6
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d9077
movzx eax, byte [rsp + 0x45]
test eax, eax
jne 0x1400d9075
movzx eax, byte [0x14013414f]
test eax, eax
je 0x1400d8f83
mov cx, 0x39
call fcn.1400b6d20
movzx eax, byte [0x140145c7b]
test eax, eax
je 0x1400d8fa1
mov eax, dword [0x140134110]
neg eax
xor edx, edx
mov ecx, eax
call fcn.1400b8820
jmp 0x1400d8fae
xor edx, edx
mov ecx, dword [0x140134110]
call fcn.1400b8820
movzx eax, byte [0x140134c54]
test eax, eax
je 0x1400d9034
movzx eax, byte [0x140145c7b]
test eax, eax
je 0x1400d8fff
mov dword [rsp + 0x134], 0x4b
lea rdx, [rsp + 0x134]
lea rcx, [rsp + 0x2a0]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov eax, dword [0x140134114]
neg eax
xor edx, edx
mov ecx, eax
call fcn.1400b8820
jmp 0x1400d9034
mov dword [rsp + 0x138], 0x4b
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x2a8]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
xor edx, edx
mov ecx, dword [0x140134114]
call fcn.1400b8820
movzx eax, byte [0x14013414f]
test eax, eax
je 0x1400d9070
mov dword [rsp + 0x13c], 0x10
lea rdx, [rsp + 0x13c]
lea rcx, [rsp + 0x2b0]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov cx, 0x39
call fcn.1400b8950
mov byte [rsp + 0x45], 1
jmp 0x1400d907c
mov byte [rsp + 0x45], 0
mov ecx, dword [0x140144e3c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d9242
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d9242
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d9242
mov eax, 1
imul rax, rax, 7
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d9242
movzx eax, byte [rsp + 0x46]
test eax, eax
jne 0x1400d9240
movzx eax, byte [0x140145c7f]
test eax, eax
je 0x1400d90f3
mov cx, 0x1e
call fcn.1400b6d20
jmp 0x1400d90fc
mov cx, 0x20
call fcn.1400b6d20
mov dword [rsp + 0x140], 0xf
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x2b8]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov cx, 0x39
call fcn.1400b6d20
mov dword [rsp + 0xa0], 0x14
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x2c0]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov r9b, 1
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be590
mov dword [rsp + 0xa4], 0x32
lea rdx, [rsp + 0xa4]
lea rcx, [rsp + 0x2c8]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx eax, byte [0x140145c7f]
test eax, eax
je 0x1400d91aa
mov cx, 0x1e
call fcn.1400b8950
jmp 0x1400d91b3
mov cx, 0x20
call fcn.1400b8950
mov dword [rsp + 0xa8], 0x1f4
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x2d0]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx ecx, word [str.tuw]
call fcn.1400b6d20
xor r9d, r9d
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be590
mov dword [rsp + 0xac], 0x32
lea rdx, [rsp + 0xac]
lea rcx, [rsp + 0x2d8]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx ecx, word [str.tuw]
call fcn.1400b8950
mov cx, 0x39
call fcn.1400b8950
mov byte [rsp + 0x46], 1
jmp 0x1400d9247
mov byte [rsp + 0x46], 0
mov ecx, dword [0x140145d90]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d92dc
mov rcx, qword [rsp + 0x58]
call fcn.1400b6f60
movzx eax, al
test eax, eax
je 0x1400d92dc
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d92dc
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d92dc
mov eax, 1
imul rax, rax, 3
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d92dc
movzx eax, byte [rsp + 0x47]
test eax, eax
jne 0x1400d92da
lea rcx, [0x140145c8b]
call fcn.1400b1c00
movzx eax, al
test eax, eax
jne 0x1400d92bf
mov byte [rsp + 0x4f], 1
jmp 0x1400d92c4
mov byte [rsp + 0x4f], 0
movzx edx, byte [rsp + 0x4f]
lea rcx, [0x140145c8b]
call fcn.1400b1090
mov byte [rsp + 0x47], 1
jmp 0x1400d92fa
mov byte [rsp + 0x47], 0
movzx eax, byte [0x140145c81]
test eax, eax
je 0x1400d92fa
xor edx, edx
lea rcx, [0x140145c8b]
call fcn.1400b1090
mov ecx, dword [0x140144e40]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d961b
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d961b
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d961b
mov eax, 1
imul rax, rax, 4
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d961b
movzx eax, byte [rsp + 0x41]
test eax, eax
jne 0x1400d9619
movzx eax, byte [0x14013414e]
test eax, eax
je 0x1400d9371
mov cx, 0x35
call fcn.1400b6d20
jmp 0x1400d937d
lea rcx, [0x140144e88]
call fcn.1400b8880
mov dword [rsp + 0xb0], 0x32
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x2e0]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx eax, byte [0x14013414e]
test eax, eax
je 0x1400d93b9
mov cx, 0x35
call fcn.1400b8950
lea rax, [0x140145b70]
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x98], 0xffffffffffffffff
inc qword [rsp + 0x98]
mov rax, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x98]
cmp byte [rax + rcx], 0
jne 0x1400d93d4
mov rax, qword [rsp + 0x98]
cmp rax, 1
jb 0x1400d949e
lea rdx, [0x140145b70]
lea rcx, [rsp + 0x4d8]
call fcn.1400ad1a0
lea rcx, [rsp + 0x4d8]
call fcn.1400b8880
lea rcx, [rsp + 0x4d8]
call fcn.1400b0430
mov dword [rsp + 0xb4], 0x32
lea rdx, [rsp + 0xb4]
lea rcx, [rsp + 0x2e8]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov cx, 0x1c
call fcn.1400b6d20
mov dword [rsp + 0xb8], 0x23
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x2f0]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov cx, 0x1c
call fcn.1400b8950
mov byte [rsp + 0x41], 1
jmp 0x1400d8b85
lea rcx, [0x140144e60]
call fcn.1400b8880
mov dword [rsp + 0xbc], 0x32
lea rdx, [rsp + 0xbc]
lea rcx, [rsp + 0x2f8]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov cx, 0x1c
call fcn.1400b6d20
mov dword [rsp + 0xc0], 0x23
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x300]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov cx, 0x1c
call fcn.1400b8950
cmp dword [0x140145b68], 2
jne 0x1400d9517
jmp 0x1400d953f
mov dword [rsp + 0xc4], 0x41
lea rdx, [rsp + 0xc4]
lea rcx, [rsp + 0x308]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
cmp dword [0x140145b68], 0
jne 0x1400d9570
mov dword [rsp + 0xc8], 0x32f
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x310]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
cmp dword [0x140145b68], 1
jne 0x1400d95a1
mov dword [rsp + 0xcc], 0xaf
lea rdx, [rsp + 0xcc]
lea rcx, [rsp + 0x318]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov eax, dword [0x140134128]
inc eax
movzx ecx, ax
call fcn.1400b6d20
mov eax, dword [0x140134128]
inc eax
movzx ecx, ax
call fcn.1400b8950
mov dword [rsp + 0xd0], 4
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x320]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx eax, byte [0x140145b6c]
test eax, eax
jne 0x1400d9604
mov eax, dword [0x140134128]
inc eax
movzx ecx, ax
call fcn.1400b6d20
mov eax, dword [0x140134128]
inc eax
movzx ecx, ax
call fcn.1400b8950
mov byte [rsp + 0x41], 1
jmp 0x1400d9620
mov byte [rsp + 0x41], 0
mov ecx, dword [0x140144e48]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d986f
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d986f
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d986f
mov eax, 1
imul rax, rax, 2
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d986f
movzx eax, byte [rsp + 0x48]
test eax, eax
jne 0x1400d986d
movzx eax, byte [0x140145c80]
test eax, eax
je 0x1400d96ee
mov cx, 0x39
call fcn.1400b6d20
mov dword [rsp + 0xd4], 0x226
lea rdx, [rsp + 0xd4]
lea rcx, [rsp + 0x328]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov cx, 0x11
call fcn.1400b6d20
mov dword [rsp + 0xd8], 0x44
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x330]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov r9b, 1
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be590
movzx eax, byte [0x140145c7e]
test eax, eax
jne 0x1400d9738
mov dword [rsp + 0xdc], 0x12c
lea rdx, [rsp + 0xdc]
lea rcx, [rsp + 0x338]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov dword [rsp + 0xe0], 0xc8
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x340]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx eax, byte [0x140145c80]
test eax, eax
je 0x1400d977d
mov cx, 0x39
call fcn.1400b8950
mov cx, 0x11
call fcn.1400b8950
xor r9d, r9d
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be590
mov dword [rsp + 0xe4], 8
lea rdx, [rsp + 0xe4]
lea rcx, [rsp + 0x348]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx ecx, word [str.tuw]
call fcn.1400b6d20
mov dword [rsp + 0xe8], 0x11
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x3f0]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov dl, 1
lea rcx, [0x140145c8c]
call fcn.1400b1090
mov dword [rsp + 0xec], 0x10
lea rdx, [rsp + 0xec]
lea rcx, [rsp + 0x350]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx ecx, word [str.tuw]
call fcn.1400b8950
mov dword [rsp + 0xf0], 0xf3
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x358]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
xor edx, edx
lea rcx, [0x140145c8c]
call fcn.1400b1090
mov byte [rsp + 0x48], 1
jmp 0x1400d9874
mov byte [rsp + 0x48], 0
mov ecx, dword [0x140145d84]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d98f8
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d98f8
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d98f8
mov eax, 1
imul rax, rax, 0xb
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d98f8
movzx eax, byte [rsp + 0x49]
test eax, eax
jne 0x1400d98f6
lea rcx, [0x140145c8d]
call fcn.1400b1c00
movzx eax, al
test eax, eax
jne 0x1400d98db
mov byte [rsp + 0x50], 1
jmp 0x1400d98e0
mov byte [rsp + 0x50], 0
movzx edx, byte [rsp + 0x50]
lea rcx, [0x140145c8d]
call fcn.1400b1090
mov byte [rsp + 0x49], 1
jmp 0x1400d9916
mov byte [rsp + 0x49], 0
movzx eax, byte [0x140145c84]
test eax, eax
je 0x1400d9916
xor edx, edx
lea rcx, [0x140145c8d]
call fcn.1400b1090
mov ecx, dword [0x140144e5c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d9b54
mov rcx, qword [rsp + 0x58]
call fcn.1400b6f60
movzx eax, al
test eax, eax
je 0x1400d9b54
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d9b54
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d9b54
mov eax, 1
imul rax, rax, 9
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d9b54
movzx eax, byte [rsp + 0x4a]
test eax, eax
jne 0x1400d9b52
movzx eax, byte [0x14013414e]
test eax, eax
je 0x1400d99a2
mov cx, 0x35
call fcn.1400b6d20
jmp 0x1400d99ae
lea rcx, [0x140144e88]
call fcn.1400b8880
mov dword [rsp + 0xf4], 0x32
lea rdx, [rsp + 0xf4]
lea rcx, [rsp + 0x360]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx eax, byte [0x14013414e]
test eax, eax
je 0x1400d99ea
mov cx, 0x35
call fcn.1400b8950
lea rdx, [0x1401068a8]
lea rcx, [rsp + 0x4f8]
call fcn.1400ad1a0
lea rcx, [rsp + 0x4f8]
call fcn.1400b8880
lea rcx, [rsp + 0x4f8]
call fcn.1400b0430
mov dword [rsp + 0xf8], 0x32
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x368]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov cx, 0x1c
call fcn.1400b6d20
mov dword [rsp + 0xfc], 0x23
lea rdx, [rsp + 0xfc]
lea rcx, [rsp + 0x370]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov cx, 0x1c
call fcn.1400b8950
mov dword [rsp + 0x100], 0xf8
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x378]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov cx, 0x39
call fcn.1400b6d20
movzx ecx, word [str.tuw]
call fcn.1400b6d20
movzx eax, byte [0x140145c89]
test eax, eax
jne 0x1400d9acb
mov cx, 0x1f
call fcn.1400b6d20
mov dword [rsp + 0x104], 0x19
lea rdx, [rsp + 0x104]
lea rcx, [rsp + 0x380]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
mov cx, 0x39
call fcn.1400b8950
movzx ecx, word [str.tuw]
call fcn.1400b8950
mov cx, 0x1c
call fcn.1400b8950
mov dword [rsp + 0x108], 0x19
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0x388]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx eax, byte [0x140145c89]
test eax, eax
jne 0x1400d9b4d
mov cx, 0x1f
call fcn.1400b8950
mov byte [rsp + 0x4a], 1
jmp 0x1400d9b59
mov byte [rsp + 0x4a], 0
mov ecx, dword [0x140145d94]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d9d92
mov rcx, qword [rsp + 0x58]
call fcn.1400b6f60
movzx eax, al
test eax, eax
je 0x1400d9d92
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d9d92
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d9d92
mov eax, 1
imul rax, rax, 0xc
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d9d92
movzx eax, byte [rsp + 0x4b]
test eax, eax
jne 0x1400d9d90
lea rcx, [0x140134c60]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
movsd xmm1, qword [0x14010d1d8]
divsd xmm1, xmm0
movaps xmm0, xmm1
cvttsd2si eax, xmm0
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x88], 0x1f
mov dword [rsp + 0x68], 0x20
mov dword [rsp + 0x11c], 0x11
movzx eax, byte [0x140145c86]
test eax, eax
je 0x1400d9c2e
mov eax, dword [rsp + 0x54]
neg eax
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x68], 0x1e
mov eax, dword [rsp + 0x54]
neg eax
xor edx, edx
mov ecx, eax
call fcn.1400b8820
mov dword [rsp + 0x10c], 0x64
lea rdx, [rsp + 0x10c]
lea rcx, [rsp + 0x390]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx ecx, word [rsp + 0x88]
call fcn.1400b6d20
mov dword [rsp + 0x110], 0x10
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x398]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx ecx, word [rsp + 0x88]
call fcn.1400b8950
movzx ecx, word [rsp + 0x68]
call fcn.1400b6d20
xor edx, edx
mov ecx, dword [rsp + 0x54]
call fcn.1400b8820
mov dword [rsp + 0x114], 0xbd6
lea rdx, [rsp + 0x114]
lea rcx, [rsp + 0x3a0]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9df0
movzx ecx, word [rsp + 0x68]
call fcn.1400b8950
movzx eax, byte [0x140134c56]
test eax, eax
jne 0x1400d9d06
movzx eax, byte [0x140134c57]
test eax, eax
jne 0x1400d9d06
jmp 0x1400d9d0f
mov cx, 0x11
call fcn.1400b6d20
movzx eax, byte [0x140134c56]
test eax, eax
je 0x1400d9d80
xor edx, edx
mov ecx, dword [rsp + 0x54]
call fcn.1400b8820
mov dword [rsp + 0x118], 0x32
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x3a8]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9dc0
movzx ecx, word [rsp + 0x11c]
call fcn.1400b8950
mov eax, dword [rsp + 0x54]
neg eax
xor edx, edx
mov ecx, eax
call fcn.1400b8820
movzx eax, byte [0x140134c57]
test eax, eax
je 0x1400d9d7e
movzx ecx, word [rsp + 0x68]
call fcn.1400b6d20
jmp 0x1400d9d8b
xor edx, edx
mov ecx, dword [rsp + 0x54]
call fcn.1400b8820
mov byte [rsp + 0x4b], 1
jmp 0x1400d9d97
mov byte [rsp + 0x4b], 0
mov ecx, dword [0x140144e54]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d9e2c
mov rcx, qword [rsp + 0x58]
call fcn.1400b6f60
movzx eax, al
test eax, eax
je 0x1400d9e2c
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d9e2c
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d9e2c
mov eax, 1
imul rax, rax, 8
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d9e2c
movzx eax, byte [rsp + 0x4c]
test eax, eax
jne 0x1400d9e2a
lea rcx, [0x140145c8e]
call fcn.1400b1c00
movzx eax, al
test eax, eax
jne 0x1400d9e0f
mov byte [rsp + 0x51], 1
jmp 0x1400d9e14
mov byte [rsp + 0x51], 0
movzx edx, byte [rsp + 0x51]
lea rcx, [0x140145c8e]
call fcn.1400b1090
mov byte [rsp + 0x4c], 1
jmp 0x1400d9e4a
mov byte [rsp + 0x4c], 0
movzx eax, byte [0x140145c85]
test eax, eax
je 0x1400d9e4a
xor edx, edx
lea rcx, [0x140145c8e]
call fcn.1400b1090
mov ecx, dword [0x140144e58]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d9edf
mov rcx, qword [rsp + 0x58]
call fcn.1400b6f60
movzx eax, al
test eax, eax
je 0x1400d9edf
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d9edf
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d9edf
mov eax, 1
imul rax, rax, 0xa
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d9edf
movzx eax, byte [rsp + 0x4d]
test eax, eax
jne 0x1400d9edd
lea rcx, [0x140145c8f]
call fcn.1400b1c00
movzx eax, al
test eax, eax
jne 0x1400d9ec2
mov byte [rsp + 0x52], 1
jmp 0x1400d9ec7
mov byte [rsp + 0x52], 0
movzx edx, byte [rsp + 0x52]
lea rcx, [0x140145c8f]
call fcn.1400b1090
mov byte [rsp + 0x4d], 1
jmp 0x1400d9efd
mov byte [rsp + 0x4d], 0
movzx eax, byte [0x140145c83]
test eax, eax
je 0x1400d9efd
xor edx, edx
lea rcx, [0x140145c8f]
call fcn.1400b1090
lea rcx, [rsp + 0x1e0]
call fcn.1400d24e0
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x3b0]
call fcn.1400818a0
mov rdx, rax
lea rcx, [rsp + 0x3b8]
call fcn.1400a0d50
mov rcx, rax
call fcn.14008fd30
cmp rax, 1
jl 0x1400d9f8d
xor eax, eax
cmp eax, 1
je 0x1400d9f75
call fcn.1400b6a60
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
call fcn.1400b67c0
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x3c0]
call fcn.1400d24e0
mov rax, qword [rax]
mov qword [rsp + 0x150], rax
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d9fd0
mov rcx, qword [rsp + 0x58]
call fcn.1400b6f60
movzx eax, al
test eax, eax
je 0x1400d9fd0
lea rcx, [rsp + 0x3c8]
call fcn.1400d24e0
mov rax, qword [rax]
mov qword [rsp + 0x90], rax
jmp 0x1400da36b
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400da353
movzx eax, byte [0x140134c55]
test eax, eax
je 0x1400da353
lea rcx, [rsp + 0x1e8]
call fcn.1400d24e0
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x3d0]
call fcn.1400818a0
mov rdx, rax
lea rcx, [rsp + 0x1f0]
call fcn.1400a0bc0
mov rcx, rax
call fcn.140033f10
mov dword [rsp + 0x120], eax
cmp dword [rsp + 0x120], 0xf
jl 0x1400da351
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0x148], rax
lea rax, [rsp + 0x228]
mov rdi, rax
xor eax, eax
mov ecx, 0x28
rep stosb byte [rdi], al
mov dword [rsp + 0x228], 0
mov dword [rsp + 0x23c], 2
mov rcx, qword [rsp + 0x58]
call fcn.1400b6f60
movzx eax, al
test eax, eax
jne 0x1400da287
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xfffffffffffffffe
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, 0x28
lea rdx, [rsp + 0x228]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
mov dword [rsp + 0x23c], 4
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, 0x28
lea rdx, [rsp + 0x228]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
movzx eax, byte [0x14013414e]
test eax, eax
je 0x1400da16a
mov cx, 0x35
call fcn.1400b6d20
jmp 0x1400da176
lea rcx, [0x140144e88]
call fcn.1400b8880
movzx eax, byte [0x14013414e]
test eax, eax
je 0x1400da195
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x35
call fcn.1400b8950
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x34
call fcn.1400b6d20
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x34
call fcn.1400b8950
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x1c
call fcn.1400b6d20
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x1c
call fcn.1400b8950
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, qword [rsp + 0x148]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xfffffffffffffffe
mov rcx, qword [rsp + 0x148]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x148]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
lea rcx, [rsp + 0x3d8]
call fcn.1400d24e0
mov rax, qword [rax]
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x58]
call fcn.1400b6f60
movzx eax, al
cmp eax, 1
jne 0x1400da351
movzx eax, byte [0x14013414e]
test eax, eax
je 0x1400da2b3
mov cx, 0x35
call fcn.1400b6d20
jmp 0x1400da2bf
lea rcx, [0x140144e88]
call fcn.1400b8880
movzx eax, byte [0x14013414e]
test eax, eax
je 0x1400da2de
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x35
call fcn.1400b8950
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x34
call fcn.1400b6d20
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x34
call fcn.1400b8950
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x1c
call fcn.1400b6d20
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x1c
call fcn.1400b8950
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x3e0]
call fcn.1400d24e0
mov rax, qword [rax]
mov qword [rsp + 0x90], rax
jmp 0x1400da36b
lea rcx, [rsp + 0x3e8]
call fcn.1400d24e0
mov rax, qword [rax]
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x58]
call fcn.1400b6f60
movzx eax, al
test eax, eax
jne 0x1400da3b4
xor edx, edx
lea rcx, [0x140145c8f]
call fcn.1400b1090
xor edx, edx
lea rcx, [0x140145c8e]
call fcn.1400b1090
xor edx, edx
lea rcx, [0x140145c8a]
call fcn.1400b1090
xor edx, edx
lea rcx, [0x140145c8b]
call fcn.1400b1090
mov dword [rsp + 0x124], 0x32
lea rdx, [rsp + 0x124]
lea rcx, [rsp + 0x470]
call fcn.14007fb70
mov rcx, rax
call fcn.1400a9df0
jmp 0x1400d8b85
lea rdx, str.RMCSettings.json
lea rcx, [rsp + 0x518]
call fcn.1400ad1a0
lea rcx, [rsp + 0x518]
call fcn.1400bbe90
lea rcx, [rsp + 0x518]
call fcn.1400b0430
lea rcx, [rsp + 0x1f8]
call fcn.1400d1560
call fcn.1400b64a0
call fcn.140050d60
call fcn.140051c00
xor ecx, ecx
call fcn.140011260
mov rcx, qword [0x140145cb8]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov dword [rsp + 0x128], 0
lea rcx, [rsp + 0x1f8]
call fcn.1400b0f90
lea rcx, [rsp + 0x400]
call fcn.1400b0f90
lea rcx, [rsp + 0x410]
call fcn.1400b0f90
lea rcx, [rsp + 0x420]
call fcn.1400b0f90
lea rcx, [rsp + 0x430]
call fcn.1400b0f90
lea rcx, [rsp + 0x440]
call fcn.1400b0f90
lea rcx, [rsp + 0x450]
call fcn.1400b0f90
lea rcx, [rsp + 0x208]
call fcn.1400b0430
lea rcx, [rsp + 0x160]
call fcn.1400b0430
mov eax, dword [rsp + 0x128]
add rsp, 0x5e0
pop rdi
ret