Function at 0x140001000
Capabilities:
Allocate or change rwx memory
Authenticate hmac
Check for time delay via gettickcount
Check internet connectivity via wininet
Download url
Execute shellcode via indirect call
Log keystrokes via polling
Parse pe header
Receive data
Resolve function by parsing pe exports

Disassembly:
sub rsp, 0x28
mov r8, 0xc20
xor rdx, rdx
movabs rcx, 0x1400c9abc
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x1400c9ac4], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x1400c9abc], rax
movabs rax, 0x1400b712b
mov qword [0x1400c9ad4], rax
call fcn.140020a40
call fcn.14001fdb0
call fcn.14001fbc8
call fcn.14001e5b0
call fcn.14001d5d0
call fcn.14001d29c
call fcn.14001cfcc
call fcn.14001c060
call fcn.14001badc
call fcn.14001b828
call fcn.1400196d8
call fcn.1400178d0
call fcn.140015ba4
call fcn.140014fb8
call fcn.1400146a4
call fcn.140012ca8
call fcn.140017820
call fcn.140013490
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14001bc84
add rsp, 0x28
lea rcx, [0x1400c9adc]
pop rdx
call fcn.140020ad0
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.0.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c3c0
add rsp, 0x28
pop qword [0x1400cace0]
movabs rbp, 0x1400784e6
mov r15, rbp
movabs rbp, 0x140075950
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x140075950
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001c6c0
push 0
pop rcx
call fcn.14001bfc0
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.1.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c3c0
add rsp, 0x28
pop qword [0x1400cace0]
movabs rbp, 0x14007b457
mov r15, rbp
movabs rbp, 0x1400784e6
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x1400784e6
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001c6c0
push 0
pop rcx
call fcn.14001bfc0
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.3.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c3c0
add rsp, 0x28
pop qword [0x1400cace0]
movabs rbp, 0x14007ea8c
mov r15, rbp
movabs rbp, 0x14007b457
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x14007b457
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001c6c0
push 0
pop rcx
call fcn.14001bfc0
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.4.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c3c0
add rsp, 0x28
pop qword [0x1400cace0]
movabs rbp, 0x14008345d
mov r15, rbp
movabs rbp, 0x14007ea8c
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x14007ea8c
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001c6c0
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.5.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c3c0
add rsp, 0x28
pop qword [0x1400cace0]
movabs rbp, 0x14008606a
mov r15, rbp
movabs rbp, 0x14008345d
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x14008345d
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001c6c0
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.6.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c3c0
add rsp, 0x28
pop qword [0x1400cace0]
movabs rbp, 0x140087f11
mov r15, rbp
movabs rbp, 0x14008606a
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x14008606a
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001c6c0
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.7.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c3c0
add rsp, 0x28
pop qword [0x1400cace0]
movabs rbp, 0x14008a479
mov r15, rbp
movabs rbp, 0x140087f11
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x140087f11
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001c6c0
push 0
pop rcx
call fcn.14001bfc0
call fcn.140013558
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.0.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140013808
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9ae4], rax
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.1.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 1
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140013808
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9ae4], rax
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.3.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 3
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140013808
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9ae4], rax
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.4.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 4
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140013808
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9ae4], rax
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.5.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 5
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140013808
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9ae4], rax
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.6.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 6
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140013808
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9ae4], rax
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9adc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.7.ogg
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 7
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140013808
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9ae4], rax
call fcn.140017820
mov rdx, qword [0x1400cace0]
push rdx
push rdx
push 0
push 0x40
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140015000
add rsp, 0x28
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000fda2
add rsp, 0x28
lea rcx, [0x1400c9aec]
pop rdx
call fcn.140020ad0
movabs rbp, 0x14008a479
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
call fcn.14001d8a8
and rax, rax
je 0x140002a6d
movabs rbp, 0x14009bc30
mov rax, rbp
push rax
push 2
pop rcx
pop rdx
call fcn.14001d8a8
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0x41
push 0x133
push 2
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14001d354
call fcn.14001d3a0
push 0x100
push 0x18
movabs rax, 0x1400752ad
push rax
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001bb00
and rax, rax
je 0x140001987
push 0x100
push 0x30
movabs rax, 0x1400752ad
push rax
push 2
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001bb00
and rax, rax
je 0x1400019b1
push 0x120
push 0xfa
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001db20
and rax, rax
je 0x140001aeb
push 1
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 1
pop rcx
call fcn.14001bc64
mov rax, rax
push rax
pop rcx
call fcn.14001d400
push 0x11
pop rcx
call fcn.14001d414
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140015674
mov rax, rax
push rax
movabs rax, str.Letron
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001d424
call fcn.14001d3a0
push 0
push 0x64
push 0xc8
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001dc88
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0x11
pop rcx
call fcn.14001d414
sub rsp, 8
push 0x64
push 0xc8
push 0x12
push 0x133
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4a4
add rsp, 0x30
call fcn.14001d3a0
push 1
pop rcx
call fcn.14001d550
mov rdx, 0x65
sub rsp, 8
movabs rax, 0x1400ca60c
push rax
sub rsp, 0x20
movabs r9, 0x140075940
mov r8, 8
mov rcx, 8
call fcn.14001ce48
add rsp, 0x30
mov qword [0x1400ca60c], rax
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14001bc84
add rsp, 0x28
lea rcx, [0x1400c9af4]
pop rdx
call fcn.140020ad0
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9af4]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.Options
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0xa
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c3c0
add rsp, 0x28
pop qword [0x1400cace0]
and rax, rax
je 0x140001c09
movabs rbp, 0x1400b5375
mov r15, rbp
movabs rbp, str.TRAINER_r_n_r_n_r_nNumpad_1:_Unlimited_Health_r_nNumpad_2:_Mega_Resources_r_nNumpad_3:_Unlimited_Ammo_Clips_r_nNumpad_4:_No_Reload_r_nNumpad_5:_No_Gun_Overheat_r_nNumpad_6:_Unlimited_Gas_Mask_Time_r_nNumpad_7:_Unbreakable_Gas_Mask_r_nNumpad_8:_Super_Accuracy_r_nNumpad_9:_No_Recoil
sub r15, rbp
mov rax, r15
push rax
movabs rbp, str.TRAINER_r_n_r_n_r_nNumpad_1:_Unlimited_Health_r_nNumpad_2:_Mega_Resources_r_nNumpad_3:_Unlimited_Ammo_Clips_r_nNumpad_4:_No_Reload_r_nNumpad_5:_No_Gun_Overheat_r_nNumpad_6:_Unlimited_Gas_Mask_Time_r_nNumpad_7:_Unbreakable_Gas_Mask_r_nNumpad_8:_Super_Accuracy_r_nNumpad_9:_No_Recoil
mov rax, rbp
push rax
push 0xa
pop rcx
pop rdx
pop r8
call fcn.14001c6c0
push 0xa
pop rcx
call fcn.14001bfc0
jmp 0x140001c2b
movabs rax, str.Could_not_install_the_file___Installtion_failed
push rax
movabs rax, str.Error
push rax
pop rcx
pop rdx
call fcn.140014738
jmp 0x14000e7f8
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9af4]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.help.txt
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c3c0
add rsp, 0x28
pop qword [0x1400cace0]
and rax, rax
je 0x140001cdf
movabs rbp, 0x1400b6568
mov r15, rbp
movabs rbp, 0x1400b5375
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x1400b5375
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001c6c0
push 0
pop rcx
call fcn.14001bfc0
jmp 0x140001cfc
movabs rax, str.Could_not_create_HELP.TXT_file.
push rax
movabs rax, str.Error
push rax
pop rcx
pop rdx
call fcn.140014738
mov rdx, 0x65
sub rsp, 8
movabs rax, 0x1400ca60c
push rax
sub rsp, 0x20
movabs r9, 0x140075940
mov r8, 8
mov rcx, 8
call fcn.14001ce48
add rsp, 0x30
mov qword [0x1400ca60c], rax
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9af4]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.Options
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0xa
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c4e0
add rsp, 0x28
pop qword [0x1400cace0]
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
push 0xa
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c750
add rsp, 0x28
movabs rcx, 0x1400750be
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
lea rcx, [0x1400c9afc]
pop rdx
call fcn.140020ad0
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
push 0xa
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c750
add rsp, 0x28
lea rcx, [0x1400c9b04]
pop rdx
call fcn.140020ad0
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
push 0xa
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c750
add rsp, 0x28
mov r15, qword [0x1400c9b0c]
inc r15
mov rbp, qword [0x1400ca60c]
shl r15, 3
lea rcx, [r15 + rbp]
pop rdx
call fcn.140020ad0
inc qword [0x1400c9b0c]
push 0xa
pop rcx
call fcn.14001c8c0
mov r15, rax
cmp r15, 1
jne 0x140001e19
push 0xa
pop rcx
call fcn.14001bfc0
fild qword [0x1400c9b0c]
fmul dword [0x140075914]
fstp dword [0x1400ca2b0]
fld dword [0x1400ca2b0]
fmul dword [0x140075918]
fstp dword [0x1400ca2b4]
fld dword [0x1400ca2b0]
fild qword [0x1400c9b0c]
fdiv dword [0x14007591c]
fdivp st(1)
fstp dword [0x1400ca2b8]
fld dword [0x1400ca2b4]
fild qword [0x1400c9b0c]
fdiv dword [0x14007591c]
fdivp st(1)
fstp dword [0x1400ca2bc]
fld dword [0x1400ca2b0]
fcomp dword [0x140075920]
fnstsw ax
test ah, 1
jne 0x140001ef9
mov r15, qword [0x1400c9b0c]
cmp r15, 0x15
jl 0x140001ef9
jmp 0x140001f02
mov rax, 1
jmp 0x140001f05
xor rax, rax
and rax, rax
je 0x140001f42
mov dword [0x1400ca2b0], 0x44480000
mov dword [0x1400ca2b4], 0x44c80000
fld dword [0x1400ca2b0]
fdiv dword [0x140075918]
fstp dword [0x1400ca2b8]
fld dword [0x1400ca2b4]
fdiv dword [0x140075918]
fstp dword [0x1400ca2bc]
push 0x120
fld dword [0x1400ca2b4]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
fld dword [0x1400ca2b0]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001db20
and rax, rax
je 0x14000218d
push 1
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 1
pop rcx
call fcn.14001bc64
mov rax, rax
push rax
pop rcx
call fcn.14001d400
push 0x11
pop rcx
call fcn.14001d414
mov qword [0x1400c9b14], 1
mov rax, qword [0x1400c9b0c]
cmp rax, qword [0x1400c9b14]
jl 0x14000203b
push 0xff
push 0
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.140015674
mov rax, rax
push rax
mov r15, qword [0x1400c9b14]
mov rbp, qword [0x1400ca60c]
shl r15, 3
push qword [r15 + rbp]
mov r15, qword [0x1400c9b14]
imul r15, r15, 0x1a
add r15, 0xffffffffffffffe8
mov rax, r15
push rax
push 2
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001d424
inc qword [0x1400c9b14]
jno 0x140001fc6
mov qword [0x1400c9b14], 1
mov rax, qword [0x1400c9b0c]
cmp rax, qword [0x1400c9b14]
jl 0x1400020bb
push 0xff
push 0xff
push 0xff
push 0xff
pop rcx
pop rdx
pop r8
pop r9
call fcn.140015674
mov rax, rax
push rax
mov r15, qword [0x1400c9b14]
mov rbp, qword [0x1400ca60c]
shl r15, 3
push qword [r15 + rbp]
mov r15, qword [0x1400c9b14]
imul r15, r15, 0x1a
add r15, 0xffffffffffffffe6
mov rax, r15
push rax
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001d424
inc qword [0x1400c9b14]
jno 0x140002046
call fcn.14001d3a0
push 0
fld dword [0x1400ca2bc]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
fld dword [0x1400ca2b8]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001dc88
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0x11
pop rcx
call fcn.14001d414
sub rsp, 8
fld dword [0x1400ca2bc]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
fld dword [0x1400ca2b8]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
push 0x43
push 7
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4a4
add rsp, 0x30
call fcn.14001d3a0
push 1
pop rcx
call fcn.14001d550
push 0x120
push 0x190
push 0x640
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001db20
and rax, rax
je 0x14000231d
push 1
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 2
pop rcx
call fcn.14001bc64
mov rax, rax
push rax
pop rcx
call fcn.14001d400
push 0x11
pop rcx
call fcn.14001d414
push qword [0x1400cace0]
sub rsp, 8
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015674
add rsp, 0x20
mov rax, rax
push rax
mov rcx, qword [0x1400c9afc]
push qword [0x1400cace0]
sub rsp, 0x20
call fcn.140020b90
add rsp, 0x20
mov rcx, qword [0x1400c9b04]
sub rsp, 0x20
call fcn.140020b90
add rsp, 0x20
inc qword [0x1400cace0]
push 0
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 0x10], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d424
add rsp, 0x28
pop qword [0x1400cace0]
call fcn.14001d3a0
push 0
push 0x64
push 0x190
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001dc88
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0x11
pop rcx
call fcn.14001d414
sub rsp, 8
push 0x64
push 0x190
push 0x28
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4a4
add rsp, 0x30
call fcn.14001d3a0
push 1
pop rcx
call fcn.14001d550
sub rsp, 8
movabs rax, 0x90000001
push rax
movabs rax, 0x14007502a
push rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001de70
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.14001de94
add rsp, 0x20
mov rax, rax
push rax
push 0
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140019b4c
add rsp, 0x40
and rax, rax
je 0x140002a6d
movabs rax, str.CLOSEBUTTON
push rax
push 0x13
push 0x13
push 6
push 0x1e4
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140017b08
add rsp, 0x30
mov qword [0x1400c9ae4], rax
movabs rax, str.READMEBUTTON
push rax
push 0x20
push 0x11e
push 0x17e
push 0xa
push 3
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140017b08
add rsp, 0x30
mov qword [0x1400c9ae4], rax
movabs rax, str.TROUBLEBUTTON
push rax
push 0x20
push 0x11e
push 0x19c
push 0xa
push 4
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140017b08
add rsp, 0x30
mov qword [0x1400c9ae4], rax
movabs rax, str.CHBUTTON
push rax
push 0x23
push 0xf5
push 1
push 0x23
push 5
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140017b08
add rsp, 0x30
mov qword [0x1400c9ae4], rax
movabs rax, str.BOXARTBUTTON
push rax
push 0x118
push 0xc8
push 0x2d
push 0x132
push 6
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140017b08
add rsp, 0x30
mov qword [0x1400c9ae4], rax
movabs rax, 0x14007526f
push rax
push 0x10e
push 0x122
push 0x41
push 0
push 7
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140017b08
add rsp, 0x30
mov qword [0x1400c9ae4], rax
push 0
pop rcx
call fcn.140019bb0
mov rax, rax
push rax
movabs rax, 0x80000000
push rax
movabs rax, str.Test
push rax
push 0x6b
push 0xc8
push 0
push 0xfffffffffffffc18
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140019758
add rsp, 0x40
push 0
pop rcx
call fcn.140019bb0
mov rax, rax
push rax
pop rcx
call fcn.140010951
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140019bb0
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000e97c
push 0
push 0
pop rcx
pop rdx
call fcn.140019c88
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
movabs rcx, str.http:__www.cheathappens.com_trnflash.asp_id
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
mov rcx, qword [0x1400c9aec]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0xc8
push 0x12c
push 0
push 0
push 2
mov rdx, qword [0x1400cacf0]
add qword [rsp + 0x28], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140019088
add rsp, 0x38
pop qword [0x1400cace0]
mov qword [0x1400c9ae4], rax
push 0
push 0
pop rcx
pop rdx
call sub.WININET.DLL_InternetGetConnectedState
mov r15, rax
and r15, r15
jne 0x14000266d
push 1
push 1
pop rcx
pop rdx
call fcn.140019c88
mov qword [0x1400c9b14], 1
mov rax, 4
cmp rax, qword [0x1400c9b14]
jl 0x140002a6d
push 0x120
push 0xfa
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001db20
and rax, rax
je 0x14000286b
push 1
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 1
pop rcx
call fcn.14001bc64
mov rax, rax
push rax
pop rcx
call fcn.14001d400
push 0x11
pop rcx
call fcn.14001d414
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140015674
mov rax, rax
push rax
movabs rax, str.Letron
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001d424
call fcn.14001d3a0
push 0
push 0x64
push 0xc8
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001dc88
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0
pop rcx
call fcn.14001d414
sub rsp, 8
sub rsp, 8
push 0xff
push 0x44
push 0x44
push 0x44
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015674
add rsp, 0x28
mov rax, rax
push rax
push 0xe
push 0xaf
push 0x12
push 0x133
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
push 0x21
pop rcx
call fcn.14001d414
sub rsp, 8
push 0x64
push 0xc8
push 0x12
push 0x133
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4a4
add rsp, 0x30
call fcn.14001d3a0
push 1
pop rcx
call fcn.14001d550
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140019bb0
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000e97c
push 0x32
pop rcx
call fcn.140015690
push 0x120
push 0xfa
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001db20
and rax, rax
je 0x140002a55
push 1
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 1
pop rcx
call fcn.14001bc64
mov rax, rax
push rax
pop rcx
call fcn.14001d400
push 0x11
pop rcx
call fcn.14001d414
push 0xff
push 0xff
push 0xff
push 0xff
pop rcx
pop rdx
pop r8
pop r9
call fcn.140015674
mov rax, rax
push rax
movabs rax, str.Letron
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001d424
call fcn.14001d3a0
push 0
push 0x64
push 0xc8
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001dc88
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0
pop rcx
call fcn.14001d414
sub rsp, 8
sub rsp, 8
push 0xff
push 0x44
push 0x44
push 0x44
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015674
add rsp, 0x28
mov rax, rax
push rax
push 0xe
push 0xaf
push 0x12
push 0x133
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
push 0x21
pop rcx
call fcn.14001d414
sub rsp, 8
push 0x64
push 0xc8
push 0x12
push 0x133
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4a4
add rsp, 0x30
call fcn.14001d3a0
push 1
pop rcx
call fcn.14001d550
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140019bb0
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000e97c
push 0x32
pop rcx
call fcn.140015690
inc qword [0x1400c9b14]
jno 0x140002678
mov rdx, 0x100
sub rsp, 8
movabs rax, 0x1400ca61c
push rax
sub rsp, 0x20
movabs r9, 0x140075940
mov r8, 8
mov rcx, 8
call fcn.14001ce48
add rsp, 0x30
mov qword [0x1400ca61c], rax
movabs rax, 0x1400b6568
mov qword [0x1400c9ad4], rax
lea rcx, [0x1400c9b1c]
mov rdx, qword [0x1400c9ad4]
call fcn.140020c00
add qword [0x1400c9ad4], rax
mov qword [0x1400c9b14], 1
mov rax, 0xfe
cmp rax, qword [0x1400c9b14]
jl 0x140002ba6
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
movabs rax, 0x14007503e
push rax
push qword [0x1400c9b14]
push qword [0x1400c9b1c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140011110
add rsp, 0x28
lea rcx, [0x1400c9b24]
pop rdx
call fcn.140020ad0
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400c9b24]
pop rcx
sub rsp, 0x20
call fcn.140011270
add rsp, 0x28
dec rax
push rax
push qword [0x1400c9b24]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400112a0
add rsp, 0x28
mov r15, qword [0x1400c9b14]
mov rbp, qword [0x1400ca61c]
shl r15, 3
lea rcx, [r15 + rbp]
pop rdx
call fcn.140020ad0
inc qword [0x1400c9b14]
jno 0x140002ae5
call sub.KERNEL32.dll_IsDebuggerPresent
and rax, rax
je 0x140002bb8
push 0x75009553
inc ecx
ret
push 0x12c
pop rcx
call fcn.140015690
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001db20
and rax, rax
je 0x140002da2
push 1
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 1
pop rcx
call fcn.14001bc64
mov rax, rax
push rax
pop rcx
call fcn.14001d400
push 0x11
pop rcx
call fcn.14001d414
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140015674
mov rax, rax
push rax
movabs rax, str.Authenticating_Trainer......
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001d424
call fcn.14001d3a0
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001dc88
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0
pop rcx
call fcn.14001d414
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015674
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001d414
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4a4
add rsp, 0x30
call fcn.14001d3a0
push 1
pop rcx
call fcn.14001d550
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140019bb0
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000e97c
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x1400cace0]
push rdx
push rdx
pop rcx
sub rsp, 0x20
call fcn.140015000
add rsp, 0x20
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001bd1c
add rsp, 0x28
lea rcx, [0x1400c9b2c]
pop rdx
call fcn.140020ad0
mov rcx, qword [0x1400c9b2c]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
lea rcx, [0x1400c9b34]
pop rdx
call fcn.140020ad0
call sub.USER32.DLL_GetForegroundWindow
mov qword [0x1400c9b3c], rax
lea rax, [0x1400c9b44]
mov rax, rax
push rax
push qword [0x1400c9b3c]
pop rcx
pop rdx
call sub.USER32.DLL_GetWindowThreadProcessId
push qword [0x1400c9b44]
push qword [0x1400c9b54]
push 0x1f0fff
pop rcx
pop rdx
pop r8
call sub.KERNEL32.dll_OpenProcess
mov qword [0x1400c9b4c], rax
mov rax, qword [0x1400c9b44]
mov qword [0x1400c9b3c], rax
push 0x3e8
pop rcx
call fcn.14001fde0
mov qword [0x1400c9b5c], rax
mov rcx, qword [0x1400c9b34]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
lea rcx, [0x1400c9b64]
pop rdx
call fcn.140020ad0
mov rax, qword [0x1400c9b74]
mov qword [0x1400c9b6c], rax
movabs rbp, 0x1400b712b
mov qword [0x1400c9b14], rbp
push qword [0x1400c9b14]
pop rcx
call fcn.14001fe00
mov rax, rax
mov byte [0x1400ca2cc], al
movabs rbp, 0x1400b712e
mov qword [0x1400c9b14], rbp
movabs rbp, 0x1400b712e
mov r15, rbp
add r15, 0xbb8
cmp r15, qword [0x1400c9b14]
jl 0x140002f7e
push qword [0x1400c9b14]
pop rcx
call fcn.14001fe00
mov rax, rax
mov byte [0x1400ca2cd], al
movsx r15, byte [0x1400ca2cd]
movsx rax, byte [0x1400ca2cc]
xor r15, rax
mov rax, r15
mov byte [0x1400ca2ce], al
movsx r15, byte [0x1400ca2cc]
add r15, 0x37
mov rax, r15
mov byte [0x1400ca2cc], al
movsx r15, byte [0x1400ca2cc]
cmp r15, 0xff
jle 0x140002f71
movsx r15, byte [0x1400ca2cc]
add r15, 0xffffffffffffff01
mov rax, r15
mov byte [0x1400ca2cc], al
inc qword [0x1400c9b14]
jno 0x140002ee5
mov rdx, 1
sub rsp, 8
movabs rax, 0x1400ca62c
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 7
mov rcx, 0x10
call fcn.14001ce48
add rsp, 0x30
mov qword [0x1400ca62c], rax
call sub.KERNEL32.dll_GetTickCount
mov qword [0x1400c9b8c], rax
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140015000
add rsp, 0x28
lea rcx, [0x1400c9b94]
pop rdx
call fcn.140020ad0
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
push qword [0x1400c9b94]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001bd1c
add rsp, 0x28
lea rcx, [0x1400c9b94]
pop rdx
call fcn.140020ad0
movabs rdx, 0x14007502a
lea rcx, [0x1400c9b1c]
call fcn.140020c00
movabs rdx, 0x14007502a
lea rcx, [0x1400c9b9c]
call fcn.140020c00
movabs rdx, 0x14007502a
lea rcx, [0x1400c9ba4]
call fcn.140020c00
mov qword [0x1400c9bac], 0
mov dword [0x1400ca2c0], 0
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400cace0]
pop rcx
sub rsp, 0x20
call fcn.140015000
add rsp, 0x28
inc qword [0x1400cace0]
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c5d0
add rsp, 0x28
pop qword [0x1400cace0]
push 0
pop rcx
call fcn.14001c990
mov qword [0x1400c9bb4], rax
mov qword [0x1400c9b14], 1
mov r15, qword [0x1400c9bb4]
add r15, 0xfffffffffffffff8
cmp r15, qword [0x1400c9b14]
jl 0x14000312e
push 0
pop rcx
call fcn.14001c9f0
mov rax, rax
mov byte [0x1400ca2cf], al
movsxd r15, dword [0x1400ca2c0]
movzx rax, byte [0x1400ca2cf]
add r15, rax
mov rax, r15
mov dword [0x1400ca2c0], eax
inc qword [0x1400c9b14]
jno 0x1400030e2
push 0
pop rcx
call fcn.14001ca60
mov qword [0x1400c9bbc], rax
push 0
pop rcx
call fcn.14001ca60
mov qword [0x1400c9bc4], rax
push 0
pop rcx
call fcn.14001bfc0
movsxd rax, dword [0x1400ca2c0]
push rax
pop qword [0x1400c9bcc]
push qword [0x1400c9b94]
push 0
pop rcx
pop rdx
call fcn.14001c5d0
mov r15, rax
and r15, r15
jle 0x140003633
mov qword [0x1400c9b14], 1
mov rax, 0x3b8
cmp rax, qword [0x1400c9b14]
jl 0x1400031bf
push 0
pop rcx
call fcn.14001cad0
mov qword [0x1400c9bd4], rax
inc qword [0x1400c9b14]
jno 0x140003194
mov qword [0x1400c9b14], 0x3b9
mov rax, 0x3c0
cmp rax, qword [0x1400c9b14]
jl 0x14000329c
push 0
pop rcx
call fcn.14001cad0
mov qword [0x1400c9bd4], rax
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400cace0]
push 1
push qword [0x1400c9bd4]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400113c0
add rsp, 0x28
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140011580
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9bd4], rax
mov rcx, qword [0x1400c9b1c]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
mov rdx, qword [0x1400cace0]
push rdx
push rdx
push qword [0x1400c9bd4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140011670
add rsp, 0x20
pop rax
lea rcx, [0x1400c9b1c]
pop rdx
call fcn.140020ad0
inc qword [0x1400c9b14]
jno 0x1400031ca
push qword [0x1400c9b1c]
pop rcx
call fcn.14001062f
mov qword [0x1400c9bd4], rax
mov r15, qword [0x1400c9bd4]
movabs rax, 0x98989898
xor r15, rax
mov qword [0x1400c9bd4], r15
mov rax, qword [0x1400c9bd4]
mov qword [0x1400c9bdc], rax
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
push 0xa
push qword [0x1400cace0]
movabs rcx, str.0000000000
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
mov rdx, qword [0x1400cace0]
push rdx
push rdx
push qword [0x1400c9bd4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117a0
add rsp, 0x20
pop rax
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140011800
add rsp, 0x28
lea rcx, [0x1400c9b1c]
pop rdx
call fcn.140020ad0
mov qword [0x1400c9b14], 0x3c1
mov rax, 0x3c8
cmp rax, qword [0x1400c9b14]
jl 0x14000342c
push 0
pop rcx
call fcn.14001cad0
mov qword [0x1400c9bd4], rax
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400cace0]
push 1
push qword [0x1400c9bd4]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400113c0
add rsp, 0x28
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140011580
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9bd4], rax
mov rcx, qword [0x1400c9b9c]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
mov rdx, qword [0x1400cace0]
push rdx
push rdx
push qword [0x1400c9bd4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140011670
add rsp, 0x20
pop rax
lea rcx, [0x1400c9b9c]
pop rdx
call fcn.140020ad0
inc qword [0x1400c9b14]
jno 0x14000335a
push qword [0x1400c9b9c]
pop rcx
call fcn.14001062f
mov qword [0x1400c9be4], rax
mov qword [0x1400c9b14], 0x3c9
mov rax, 0x3d0
cmp rax, qword [0x1400c9b14]
jl 0x14000351c
push 0
pop rcx
call fcn.14001cad0
mov qword [0x1400c9bd4], rax
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400cace0]
push 1
push qword [0x1400c9bd4]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400113c0
add rsp, 0x28
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140011580
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9bd4], rax
mov rcx, qword [0x1400c9ba4]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
mov rdx, qword [0x1400cace0]
push rdx
push rdx
push qword [0x1400c9bd4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140011670
add rsp, 0x20
pop rax
lea rcx, [0x1400c9ba4]
pop rdx
call fcn.140020ad0
inc qword [0x1400c9b14]
jno 0x14000344a
push qword [0x1400c9ba4]
pop rcx
call fcn.14001062f
mov qword [0x1400c9bd4], rax
mov rax, qword [0x1400c9bd4]
mov qword [0x1400c9bec], rax
mov qword [0x1400c9b14], 0x3d1
mov rax, qword [0x1400c9bec]
cmp rax, qword [0x1400c9b14]
jl 0x140003573
push 0
pop rcx
call fcn.14001cad0
mov qword [0x1400c9bd4], rax
inc qword [0x1400c9b14]
jno 0x140003548
mov rax, qword [0x1400c9bec]
mov qword [0x1400c9b14], rax
mov r15, qword [0x1400c9bec]
add r15, 0x12
cmp r15, qword [0x1400c9b14]
jl 0x1400035c5
push 0
pop rcx
call fcn.14001cad0
mov qword [0x1400c9bd4], rax
mov r15, qword [0x1400c9bac]
add r15, qword [0x1400c9bd4]
mov qword [0x1400c9bac], r15
inc qword [0x1400c9b14]
jno 0x140003581
mov r15, qword [0x1400c9be4]
xor r15, qword [0x1400c9bac]
mov qword [0x1400c9bf4], r15
mov r15, qword [0x1400c9bf4]
and r15, r15
jne 0x1400035f1
mov qword [0x1400c9bf4], 0x63
mov r15, qword [0x1400c9bf4]
movabs rax, 0x98989898
xor r15, rax
mov qword [0x1400c9bf4], r15
mov rax, qword [0x1400c9bdc]
mov qword [0x1400c9bfc], rax
mov r15, qword [0x1400c9bdc]
cmp r15, qword [0x1400c9bf4]
jne 0x14000362c
jmp 0x140003631
call fcn.14000ceba
jmp 0x140003638
call fcn.14000ceba
mov r15, qword [0x1400c9bc4]
cmp r15, qword [0x1400c9bb4]
jne 0x14000364a
jmp 0x14000364f
call fcn.14000ceba
call sub.KERNEL32.dll_GetTickCount
mov qword [0x1400c9c04], rax
mov r15, qword [0x1400c9c04]
sub r15, qword [0x1400c9b8c]
cmp r15, 0x3e8
jle 0x14000367a
push 0x9099542
inc eax
ret
mov qword [0x1400c9c0c], 0x45a2a5
movabs rdx, 0x14007502a
lea rcx, [0x1400c9c14]
call fcn.140020c00
mov rdx, 0x15
sub rsp, 8
movabs rax, 0x1400ca63c
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001ce48
add rsp, 0x30
mov qword [0x1400ca63c], rax
mov rdx, 0x15
sub rsp, 8
movabs rax, 0x1400ca64c
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001ce48
add rsp, 0x30
mov qword [0x1400ca64c], rax
mov rdx, 0x15
sub rsp, 8
movabs rax, 0x1400ca65c
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001ce48
add rsp, 0x30
mov qword [0x1400ca65c], rax
mov rdx, 0x15
sub rsp, 8
movabs rax, 0x1400ca66c
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001ce48
add rsp, 0x30
mov qword [0x1400ca66c], rax
mov rdx, 0x15
sub rsp, 8
movabs rax, 0x1400ca67c
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001ce48
add rsp, 0x30
mov qword [0x1400ca67c], rax
mov rdx, 0x15
sub rsp, 8
movabs rax, 0x1400ca68c
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001ce48
add rsp, 0x30
mov qword [0x1400ca68c], rax
mov rdx, 0xa
sub rsp, 8
movabs rax, 0x1400ca69c
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001ce48
add rsp, 0x30
mov qword [0x1400ca69c], rax
push 0x3e8
pop rcx
call fcn.14001fde0
mov qword [0x1400c9b5c], rax
push 0x3e8
pop rcx
call fcn.14001fde0
mov qword [0x1400c9c1c], rax
push 0x4000
pop rcx
call fcn.14001fde0
mov qword [0x1400c9c24], rax
push 0x4000
pop rcx
call fcn.14001fde0
mov qword [0x1400c9c2c], rax
push 0x14
pop rcx
call fcn.14001fde0
mov qword [0x1400c9c34], rax
mov qword [0x1400c9b14], 1
mov rax, 0x14
cmp rax, qword [0x1400c9b14]
jl 0x140003904
mov r15, qword [0x1400c9b14]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov qword [r15 + rbp], 1
mov r15, qword [0x1400c9b14]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov qword [r15 + rbp], 1
mov r15, qword [0x1400c9b14]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov qword [r15 + rbp], 1
inc qword [0x1400c9b14]
jno 0x14000389d
mov rbp, qword [0x1400ca69c]
mov qword [rbp], 0xcc
mov qword [rbp + 8], 0xffffff
mov qword [rbp + 0x10], 0xcc0000
mov qword [rbp + 0x18], 0xaa00
mov qword [rbp + 0x20], 0x55ee
mov qword [rbp + 0x28], 0xccff
mov qword [rbp + 0x30], 0x2255
mov qword [rbp + 0x38], 0x770044
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], 0x6633ff
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400cace0]
push 1
push 1
mov rdx, qword [0x1400cace0]
push rdx
push rdx
push qword [0x1400c9bf4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117a0
add rsp, 0x20
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400118a0
add rsp, 0x28
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140011580
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9c3c], rax
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400cace0]
push 1
push 2
mov rdx, qword [0x1400cace0]
push rdx
push rdx
push qword [0x1400c9bf4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117a0
add rsp, 0x20
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400118a0
add rsp, 0x28
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140011580
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9c44], rax
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400cace0]
push 1
push 3
mov rdx, qword [0x1400cace0]
push rdx
push rdx
push qword [0x1400c9bf4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117a0
add rsp, 0x20
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400118a0
add rsp, 0x28
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140011580
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9c4c], rax
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400cace0]
push 1
push 4
mov rdx, qword [0x1400cace0]
push rdx
push rdx
push qword [0x1400c9bf4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117a0
add rsp, 0x20
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400118a0
add rsp, 0x28
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140011580
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9c54], rax
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400cace0]
push 1
push 5
mov rdx, qword [0x1400cace0]
push rdx
push rdx
push qword [0x1400c9bf4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117a0
add rsp, 0x20
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400118a0
add rsp, 0x28
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140011580
add rsp, 0x28
pop qword [0x1400cace0]
mov qword [0x1400c9c5c], rax
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0
pop rcx
call fcn.14001d414
sub rsp, 8
mov r15, qword [0x1400c9c3c]
shl r15, 3
push qword [r15 + rbp]
push 2
push 2
push 0x144
push 0x1ea
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
sub rsp, 8
mov r15, qword [0x1400c9c44]
shl r15, 3
push qword [r15 + rbp]
push 2
push 2
push 0x144
push 0x1ed
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
sub rsp, 8
mov r15, qword [0x1400c9c4c]
shl r15, 3
push qword [r15 + rbp]
push 2
push 2
push 0x144
push 0x1f0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
sub rsp, 8
mov r15, qword [0x1400c9c54]
shl r15, 3
push qword [r15 + rbp]
push 2
push 2
push 0x144
push 0x1f3
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
sub rsp, 8
mov r15, qword [0x1400c9c5c]
shl r15, 3
push qword [r15 + rbp]
push 2
push 2
push 0x144
push 0x1f6
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
call fcn.14001d3a0
movabs rdx, str.Template
lea rcx, [0x1400c9c94]
call fcn.140020c00
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14001bc84
add rsp, 0x28
lea rcx, [0x1400c9c64]
pop rdx
call fcn.140020ad0
call fcn.14000e855
call fcn.14000bc2c
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9c64]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.CH.dll
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c3c0
add rsp, 0x28
pop qword [0x1400cace0]
and rax, rax
je 0x140003e2d
movabs rbp, 0x1400b8d2e
mov r15, rbp
movabs rbp, 0x1400b712e
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x1400b712e
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001c6c0
push 0
pop rcx
call fcn.14001bfc0
jmp 0x140003e2d
push qword [0x1400cace0]
sub rsp, 8
mov rcx, qword [0x1400c9c64]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
movabs rcx, str.help.txt
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
inc qword [0x1400cace0]
push 0
mov rdx, qword [0x1400cacf0]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c3c0
add rsp, 0x28
pop qword [0x1400cace0]
and rax, rax
je 0x140003ee1
movabs rbp, 0x1400b6568
mov r15, rbp
movabs rbp, 0x1400b5375
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x1400b5375
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001c6c0
push 0
pop rcx
call fcn.14001bfc0
jmp 0x140003efe
movabs rax, str.Could_not_create_HELP.TXT_file.
push rax
movabs rax, str.Error
push rax
pop rcx
pop rdx
call fcn.140014738
movabs rax, str.CH_Trainer_Keys.dat
push rax
push 0
pop rcx
pop rdx
call fcn.14001c5d0
mov qword [0x1400c9ae4], rax
mov r15, qword [0x1400c9ae4]
and r15, r15
jle 0x140003f3e
mov qword [0x1400c9cc4], 1
push 0
pop rcx
call fcn.14001bfc0
push 0
push 0
pop rcx
pop rdx
call sub.WININET.DLL_InternetGetConnectedState
and rax, rax
je 0x140003f56
jmp 0x140003f9d
mov rax, qword [0x1400c9bfc]
mov rax, rax
push rax
pop rcx
call fcn.14000ee6f
mov r15, rax
and r15, r15
jne 0x140003f9d
push 0
movabs rax, str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push rax
movabs rax, str.No_Internet_Connection_
push rax
pop rcx
pop rdx
pop r8
call fcn.1400146e0
jmp 0x14000e7f8
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14001bc84
add rsp, 0x28
movabs rcx, str.black.txt
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
lea rcx, [0x1400c9ccc]
pop rdx
call fcn.140020ad0
mov r15, qword [0x1400c9cd4]
and r15, r15
jle 0x1400040ff
push qword [0x1400cace0]
movabs rcx, str.http:__www.cheathappens.com_unauthorized_
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
mov rdx, qword [0x1400cace0]
push rdx
push rdx
mov r15, qword [0x1400c9bfc]
xor r15, 0x7b3d89b
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117a0
add rsp, 0x20
pop rax
movabs rcx, str..zip
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
lea rcx, [0x1400c9cdc]
pop rdx
call fcn.140020ad0
movabs rdx, str.http:__www.cheathappens.com_unauthorized_0.zip
lea rcx, [0x1400c9ce4]
call fcn.140020c00
mov rcx, qword [0x1400c9cdc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
lea rcx, [0x1400c9cec]
pop rdx
call fcn.140020ad0
mov rcx, qword [0x1400c9ce4]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
lea rcx, [0x1400c9cf4]
pop rdx
call fcn.140020ad0
sub rsp, 8
push 0
push 0
mov rax, qword [0x1400c9ccc]
mov rax, rax
push rax
mov rax, qword [0x1400c9cf4]
mov rax, rax
push rax
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.URLMON.DLL_URLDownloadToFileA
add rsp, 0x30
mov qword [0x1400c9cfc], rax
push qword [0x1400cace0]
movabs rcx, str.http:__www.cheathappens.com_unauthorized_
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
mov rdx, qword [0x1400cace0]
push rdx
push rdx
mov r15, qword [0x1400c9bfc]
xor r15, 0x7b3d89b
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117a0
add rsp, 0x20
pop rax
movabs rcx, str..zip
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
lea rcx, [0x1400c9cdc]
pop rdx
call fcn.140020ad0
movabs rdx, str.http:__www.cheathappens.com_unauthorized_0.zip
lea rcx, [0x1400c9ce4]
call fcn.140020c00
mov rcx, qword [0x1400c9cdc]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
lea rcx, [0x1400c9cec]
pop rdx
call fcn.140020ad0
mov rcx, qword [0x1400c9ce4]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
lea rcx, [0x1400c9cf4]
pop rdx
call fcn.140020ad0
sub rsp, 8
push 0
push 0
mov rax, qword [0x1400c9ccc]
mov rax, rax
push rax
mov rax, qword [0x1400c9cf4]
mov rax, rax
push rax
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.URLMON.DLL_URLDownloadToFileA
add rsp, 0x30
mov qword [0x1400c9cfc], rax
mov r15, qword [0x1400c9cfc]
and r15, r15
jne 0x140004220
jmp 0x140004267
mov rax, qword [0x1400c9bfc]
mov rax, rax
push rax
pop rcx
call fcn.14000ee6f
mov r15, rax
and r15, r15
jne 0x140004267
push 0
movabs rax, str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push rax
movabs rax, str.No_Internet_Connection_
push rax
pop rcx
pop rdx
pop r8
call fcn.1400146e0
jmp 0x14000e7f8
sub rsp, 8
push 0
push 0
mov rax, qword [0x1400c9ccc]
mov rax, rax
push rax
mov rax, qword [0x1400c9cec]
mov rax, rax
push rax
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.URLMON.DLL_URLDownloadToFileA
add rsp, 0x30
mov qword [0x1400c9d04], rax
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
movabs rax, 0x1400750d3
push rax
movabs rax, str.IZnvZalZidZ_ZTraiZnerZ_UsZerZ
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140011c30
add rsp, 0x28
lea rcx, [0x1400c9d0c]
pop rdx
call fcn.140020ad0
mov r15, qword [0x1400c9d04]
and r15, r15
jne 0x1400042fc
call fcn.14000ceba
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
movabs rax, str.ZTSA.l
push rax
push qword [0x1400c9d0c]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140011c30
add rsp, 0x28
lea rcx, [0x1400c9d0c]
pop rdx
call fcn.140020ad0
mov r15, qword [0x1400c9d04]
and r15, r15
jne 0x14000452c
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001db20
and rax, rax
je 0x140004522
push 1
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 1
pop rcx
call fcn.14001bc64
mov rax, rax
push rax
pop rcx
call fcn.14001d400
push 0x11
pop rcx
call fcn.14001d414
push 0xff
push 0xff
push 0xff
push 0xff
pop rcx
pop rdx
pop r8
pop r9
call fcn.140015674
mov rax, rax
push rax
push qword [0x1400c9d0c]
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001d424
call fcn.14001d3a0
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001dc88
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0
pop rcx
call fcn.14001d414
sub rsp, 8
sub rsp, 8
push 0xff
push 0x28
push 0x28
push 0xff
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015674
add rsp, 0x28
mov rax, rax
push rax
push 0x24
push 0x1df
push 1
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001d414
sub rsp, 8
push 0x64
push 0x1f4
push 0xa
push 0xc8
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4a4
add rsp, 0x30
call fcn.14001d3a0
push 1
pop rcx
call fcn.14001d550
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140019bb0
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000e97c
call fcn.14000bc2c
jmp 0x140004338
mov r15, qword [0x1400c9cfc]
and r15, r15
je 0x14000455a
mov rax, qword [0x1400c9bfc]
mov rax, rax
push rax
pop rcx
call fcn.14000ee6f
mov r15, rax
and r15, r15
jne 0x14000455a
mov rax, 1
jmp 0x14000455d
xor rax, rax
and rax, rax
je 0x14000456d
mov qword [0x1400c9c0c], 0
mov qword [0x1400c9d14], 3
lea rbp, [0x1400ca2d4]
lea rax, [rbp]
mov rax, rax
push rax
pop rcx
call sub.USER32.DLL_GetKeyboardState
movsx rax, byte [rbp + 0x90]
push rax
pop qword [0x1400c9d1c]
mov r15, qword [0x1400c9d1c]
cmp r15, 1
jne 0x1400045c1
movabs rdx, str.Run_game_and_press_F1_at_main_menu.__Numlock_is_ON.
lea rcx, [0x1400c9d24]
call fcn.140020c00
jmp 0x1400045d7
movabs rdx, 0x1400752b3
lea rcx, [0x1400c9d24]
call fcn.140020c00
mov r15, qword [0x1400c9d14]
cmp r15, qword [0x1400c9d1c]
je 0x1400047d3
mov rax, qword [0x1400c9d1c]
mov qword [0x1400c9d14], rax
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001db20
and rax, rax
je 0x1400047d3
push 1
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 1
pop rcx
call fcn.14001bc64
mov rax, rax
push rax
pop rcx
call fcn.14001d400
push 0x11
pop rcx
call fcn.14001d414
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140015674
mov rax, rax
push rax
push qword [0x1400c9d24]
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001d424
call fcn.14001d3a0
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001dc88
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0
pop rcx
call fcn.14001d414
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015674
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001d414
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4a4
add rsp, 0x30
call fcn.14001d3a0
push 1
pop rcx
call fcn.14001d550
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140019bb0
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000e97c
call fcn.14000bc2c
push 0xa
pop rcx
call fcn.140015690
push 0x70
pop rcx
call sub.USER32.DLL_GetAsyncKeyState
mov r15, rax
and r15, 0x8000
and r15, r15
je 0x140004578
movabs rdx, str.metro.exe
lea rcx, [0x1400c9b34]
call fcn.140020c00
call fcn.14000aa13
mov r15, qword [0x1400c9b3c]
and r15, r15
jne 0x140004a3c
push 4
pop rcx
call fcn.140013ba0
push 0x12c
pop rcx
call fcn.140015690
push 0x12c
pop rcx
call fcn.140015690
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001db20
and rax, rax
je 0x140004a2c
push 1
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 1
pop rcx
call fcn.14001bc64
mov rax, rax
push rax
pop rcx
call fcn.14001d400
push 0x11
pop rcx
call fcn.14001d414
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140015674
mov rax, rax
push rax
movabs rax, str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001d424
call fcn.14001d3a0
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001dc88
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0
pop rcx
call fcn.14001d414
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015674
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001d414
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4a4
add rsp, 0x30
call fcn.14001d3a0
push 1
pop rcx
call fcn.14001d550
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140019bb0
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000e97c
push 0x7d0
pop rcx
call fcn.140015690
jmp 0x14000452c
movabs rdx, str.CH.dll
lea rcx, [0x1400c9d2c]
call fcn.140020c00
mov rcx, qword [0x1400c9c64]
push qword [0x1400cace0]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
mov rcx, qword [0x1400c9d2c]
sub rsp, 0x28
call fcn.140020b90
add rsp, 0x28
lea rcx, [0x1400c9b64]
pop rdx
call fcn.140020ad0
call fcn.14000aa6c
movabs rdx, str.xlive.dll
lea rcx, [0x1400c9d34]
call fcn.140020c00
call fcn.14000aa13
call fcn.14000baac
call fcn.14000bc2c
mov r15, qword [0x1400c9cac]
and r15, r15
jne 0x140004cbb
mov r15, qword [0x1400c9d3c]
and r15, r15
jne 0x140004cbb
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001db20
and rax, rax
je 0x140004cb6
push 1
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 1
pop rcx
call fcn.14001bc64
mov rax, rax
push rax
pop rcx
call fcn.14001d400
push 0x11
pop rcx
call fcn.14001d414
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140015674
mov rax, rax
push rax
movabs rax, str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001d424
call fcn.14001d3a0
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001dc88
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0
pop rcx
call fcn.14001d414
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015674
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001d414
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4a4
add rsp, 0x30
call fcn.14001d3a0
push 1
pop rcx
call fcn.14001d550
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140019bb0
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000e97c
jmp 0x14000452c
mov r15, qword [0x1400c9bbc]
cmp r15, qword [0x1400c9bcc]
jne 0x140004ce5
mov r15, qword [0x1400c9bbc]
and r15, r15
je 0x140004ce5
mov r15, qword [0x1400c9bcc]
and r15, r15
je 0x140004ce5
jmp 0x140004cee
mov rax, 1
jmp 0x140004cf1
xor rax, rax
and rax, rax
je 0x140004d57
push 0xa
pop rcx
call fcn.140015758
mov r15, rax
add r15, 0xa
mov qword [0x1400c9d44], r15
push 0x28
pop rcx
call fcn.140015758
mov r15, rax
add r15, 0x28
mov qword [0x1400c9d4c], r15
mov r15, qword [0x1400c9cac]
add r15, qword [0x1400c9d44]
mov qword [0x1400c9cac], r15
mov r15, qword [0x1400c9d3c]
add r15, qword [0x1400c9d4c]
mov qword [0x1400c9d3c], r15
call fcn.14000ceba
push 3
pop rcx
call fcn.140013ba0
push 0x12c
pop rcx
call fcn.140015690
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001db20
and rax, rax
je 0x140004f4c
push 1
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 1
pop rcx
call fcn.14001bc64
mov rax, rax
push rax
pop rcx
call fcn.14001d400
push 0x11
pop rcx
call fcn.14001d414
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140015674
mov rax, rax
push rax
movabs rax, str.Game_found__Trainer_Activated_
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001d424
call fcn.14001d3a0
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001dc88
push 0
pop rcx
call fcn.14001d96c
mov rax, rax
push rax
pop rcx
call fcn.14001d2e8
push 0
pop rcx
call fcn.14001d414
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015674
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4dc
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001d414
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001d4a4
add rsp, 0x30
call fcn.14001d3a0
push 1
pop rcx
call fcn.14001d550
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001db00
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140019bb0
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000e97c
mov r15, qword [0x1400c9d54]
and r15, r15
je 0x140005353
push 0x8b
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xff
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x55
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x8b
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xec
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x83
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xec
mov r15, qword [0x1400c9b5c]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x20
mov r15, qword [0x1400c9b5c]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x53
mov r15, qword [0x1400c9b5c]
add r15, 8
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x56
mov r15, qword [0x1400c9b5c]
add r15, 9
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x57
mov r15, qword [0x1400c9b5c]
add r15, 0xa
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x8d
mov r15, qword [0x1400c9b5c]
add r15, 0xb
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x45
mov r15, qword [0x1400c9b5c]
add r15, 0xc
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xe0
mov r15, qword [0x1400c9b5c]
add r15, 0xd
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x33
mov r15, qword [0x1400c9b5c]
add r15, 0xe
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xf6
mov r15, qword [0x1400c9b5c]
add r15, 0xf
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x50
mov r15, qword [0x1400c9b5c]
add r15, 0x10
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xff
mov r15, qword [0x1400c9b5c]
add r15, 0x11
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x75
mov r15, qword [0x1400c9b5c]
add r15, 0x12
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xc
mov r15, qword [0x1400c9b5c]
add r15, 0x13
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
mov r15, qword [0x1400c9d54]
add r15, 0x1000
mov qword [0x1400c9b14], r15
mov r15, qword [0x1400c9d54]
add r15, 0x200000
cmp r15, qword [0x1400c9b14]
jl 0x140005353
sub rsp, 8
push qword [0x1400c9b54]
push 0x14
push qword [0x1400c9c1c]
push qword [0x1400c9b14]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_ReadProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
push 0x14
push qword [0x1400c9c1c]
push qword [0x1400c9b5c]
pop rcx
pop rdx
pop r8
call fcn.14001fe20
mov qword [0x1400c9ae4], rax
mov r15, qword [0x1400c9ae4]
cmp r15, 1
jne 0x140005346
mov rax, qword [0x1400c9b14]
mov qword [0x1400c9d64], rax
push 0xc2
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xc
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
sub rsp, 8
push qword [0x1400c9b54]
push 3
push qword [0x1400c9b5c]
push qword [0x1400c9d64]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
inc qword [0x1400c9b14]
jno 0x140005214
mov r15, qword [0x1400c9cd4]
and r15, r15
jle 0x140005364
jmp 0x140007c69
mov r15, qword [0x1400c9c0c]
cmp r15, 0x45a2a5
jne 0x14000547e
mov rbp, qword [0x1400ca63c]
mov qword [rbp + 8], 0x61
mov qword [rbp + 0x10], 0x62
mov qword [rbp + 0x18], 0x63
mov qword [rbp + 0x20], 0x64
mov qword [rbp + 0x28], 0x65
mov qword [rbp + 0x30], 0x66
mov qword [rbp + 0x38], 0x67
mov qword [rbp + 0x40], 0x68
mov qword [rbp + 0x48], 0x69
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0xa0], 0
mov qword [0x1400c9b14], 1
mov rax, 0x14
cmp rax, qword [0x1400c9b14]
jl 0x14000547e
mov r15, qword [0x1400c9b14]
mov rbp, qword [0x1400ca63c]
shl r15, 3
push qword [r15 + rbp]
mov r15, qword [0x1400c9b14]
mov rbp, qword [0x1400ca67c]
shl r15, 3
pop qword [r15 + rbp]
inc qword [0x1400c9b14]
jno 0x140005439
movabs rax, str.CH_Trainer_Keys.dat
push rax
push 0
pop rcx
pop rdx
call fcn.14001c5d0
mov qword [0x1400c9ae4], rax
mov r15, qword [0x1400c9ae4]
and r15, r15
jle 0x140005660
mov qword [0x1400c9cc4], 1
push 0
pop rcx
call fcn.14001cad0
mov qword [0x1400c9d6c], rax
mov qword [0x1400c9b14], 1
mov rax, qword [0x1400c9d6c]
cmp rax, qword [0x1400c9b14]
jl 0x140005655
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
push 0
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001c750
add rsp, 0x28
lea rcx, [0x1400c9d74]
pop rdx
call fcn.140020ad0
push qword [0x1400c9d74]
movabs rcx, 0x140075269
pop rdx
call fcn.140020cf0
or rax, rax
je 0x14000554b
mov r15, qword [0x1400c9b14]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov qword [r15 + rbp], 0
push qword [0x1400c9d74]
movabs rcx, str.CTRL
pop rdx
call fcn.140020cf0
or rax, rax
je 0x140005580
mov r15, qword [0x1400c9b14]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov qword [r15 + rbp], 0
push qword [0x1400c9d74]
movabs rcx, 0x140075454
pop rdx
call fcn.140020cf0
or rax, rax
je 0x1400055b5
mov r15, qword [0x1400c9b14]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov qword [r15 + rbp], 0
push 0
pop rcx
call fcn.14001cad0
mov rax, rax
push rax
mov r15, qword [0x1400c9b14]
mov rbp, qword [0x1400ca63c]
shl r15, 3
pop qword [r15 + rbp]
mov rax, qword [0x1400cace0]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400cace0]
push 1
mov r15, qword [0x1400c9b14]
shl r15, 3
push qword [r15 + rbp]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400113c0
add rsp, 0x28
mov rdx, qword [0x1400cacf0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140011580
add rsp, 0x28
pop qword [0x1400cace0]
mov rax, rax
push rax
mov r15, qword [0x1400c9b14]
shl r15, 3
pop qword [r15 + rbp]
inc qword [0x1400c9b14]
jno 0x1400054d4
push 0
pop rcx
call fcn.14001bfc0
movabs rax, 0x13f1c0000
mov qword [0x1400c9d7c], rax
mov qword [0x1400c9d84], 0x491
mov r15, qword [0x1400c9cac]
sub r15, qword [0x1400c9d7c]
movabs rax, 0x13f9e0d69
add r15, rax
mov qword [0x1400c9d8c], r15
mov r15, qword [0x1400c9cac]
sub r15, qword [0x1400c9d7c]
movabs rax, 0x13f4b2262
add r15, rax
mov qword [0x1400c9d94], r15
mov r15, qword [0x1400c9cac]
sub r15, qword [0x1400c9d7c]
movabs rax, 0x13f480b2f
add r15, rax
mov qword [0x1400c9d9c], r15
mov r15, qword [0x1400c9cac]
sub r15, qword [0x1400c9d7c]
movabs rax, 0x13f38e444
add r15, rax
mov qword [0x1400c9da4], r15
mov r15, qword [0x1400c9cac]
sub r15, qword [0x1400c9d7c]
movabs rax, 0x13f47ad8c
add r15, rax
mov qword [0x1400c9dac], r15
mov r15, qword [0x1400c9cac]
sub r15, qword [0x1400c9d7c]
movabs rax, 0x13f4aa61b
add r15, rax
mov qword [0x1400c9db4], r15
mov r15, qword [0x1400c9cac]
sub r15, qword [0x1400c9d7c]
movabs rax, 0x13f4ffce4
add r15, rax
mov qword [0x1400c9dbc], r15
mov r15, qword [0x1400c9cac]
sub r15, qword [0x1400c9d7c]
movabs rax, 0x13f3ba21a
add r15, rax
mov qword [0x1400c9dc4], r15
mov r15, qword [0x1400c9cac]
sub r15, qword [0x1400c9d7c]
movabs rax, 0x13f4705fd
add r15, rax
mov qword [0x1400c9dcc], r15
mov r15, qword [0x1400c9cac]
sub r15, qword [0x1400c9d7c]
movabs rax, 0x13f477f40
add r15, rax
mov qword [0x1400c9dd4], r15
mov qword [0x1400c9ddc], 1
mov qword [0x1400c9de4], 0x40
sub rsp, 8
lea rax, [0x1400c9ddc]
mov rax, rax
push rax
push qword [0x1400c9de4]
push 0x999
push qword [0x1400c9cac]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_VirtualProtectEx
add rsp, 0x30
mov qword [0x1400c9ae4], rax
jmp 0x14000631c
push 0x83
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x3c
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x25
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x3f
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x2a
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x46
mov r15, qword [0x1400c9b5c]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 1
mov r15, qword [0x1400c9b5c]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x75
mov r15, qword [0x1400c9b5c]
add r15, 8
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xa
mov r15, qword [0x1400c9b5c]
add r15, 9
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xc7
mov r15, qword [0x1400c9b5c]
add r15, 0xa
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x81
mov r15, qword [0x1400c9b5c]
add r15, 0xb
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 8
mov r15, qword [0x1400c9b5c]
add r15, 0xc
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 3
mov r15, qword [0x1400c9b5c]
add r15, 0xd
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0xe
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0xf
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x10
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x11
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push pe_nt_image_headers64
mov r15, qword [0x1400c9b5c]
add r15, 0x12
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x3f
mov r15, qword [0x1400c9b5c]
add r15, 0x13
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xf3
mov r15, qword [0x1400c9b5c]
add r15, 0x14
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xf
mov r15, qword [0x1400c9b5c]
add r15, 0x15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x10
mov r15, qword [0x1400c9b5c]
add r15, 0x16
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x81
mov r15, qword [0x1400c9b5c]
add r15, 0x17
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 8
mov r15, qword [0x1400c9b5c]
add r15, 0x18
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 3
mov r15, qword [0x1400c9b5c]
add r15, 0x19
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x1a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x1b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xc3
mov r15, qword [0x1400c9b5c]
add r15, 0x1c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 0x1d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x1e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x1f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x49
mov r15, qword [0x1400c9b5c]
add r15, 0x20
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x83
mov r15, qword [0x1400c9b5c]
add r15, 0x21
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xfd
mov r15, qword [0x1400c9b5c]
add r15, 0x22
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 1
mov r15, qword [0x1400c9b5c]
add r15, 0x23
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x75
mov r15, qword [0x1400c9b5c]
add r15, 0x24
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x26
mov r15, qword [0x1400c9b5c]
add r15, 0x25
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x83
mov r15, qword [0x1400c9b5c]
add r15, 0x26
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xfd
mov r15, qword [0x1400c9b5c]
add r15, 0x27
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xa
mov r15, qword [0x1400c9b5c]
add r15, 0x28
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x75
mov r15, qword [0x1400c9b5c]
add r15, 0x29
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 8
mov r15, qword [0x1400c9b5c]
add r15, 0x2a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x48
mov r15, qword [0x1400c9b5c]
add r15, 0x2b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x89
mov r15, qword [0x1400c9b5c]
add r15, 0x2c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xc
mov r15, qword [0x1400c9b5c]
add r15, 0x2d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x25
mov r15, qword [0x1400c9b5c]
add r15, 0x2e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 4
mov r15, qword [0x1400c9b5c]
add r15, 0x2f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x3f
mov r15, qword [0x1400c9b5c]
add r15, 0x30
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x2a
mov r15, qword [0x1400c9b5c]
add r15, 0x31
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x46
mov r15, qword [0x1400c9b5c]
add r15, 0x32
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x83
mov r15, qword [0x1400c9b5c]
add r15, 0x33
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xfd
mov r15, qword [0x1400c9b5c]
add r15, 0x34
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 4
mov r15, qword [0x1400c9b5c]
add r15, 0x35
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xeb
mov r15, qword [0x1400c9b5c]
add r15, 0x36
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x1b
mov r15, qword [0x1400c9b5c]
add r15, 0x37
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x83
mov r15, qword [0x1400c9b5c]
add r15, 0x38
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xfd
mov r15, qword [0x1400c9b5c]
add r15, 0x39
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 7
mov r15, qword [0x1400c9b5c]
add r15, 0x3a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x74
mov r15, qword [0x1400c9b5c]
add r15, 0x3b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x16
mov r15, qword [0x1400c9b5c]
add r15, 0x3c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x83
mov r15, qword [0x1400c9b5c]
add r15, 0x3d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xfd
mov r15, qword [0x1400c9b5c]
add r15, 0x3e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xa
mov r15, qword [0x1400c9b5c]
add r15, 0x3f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x74
mov r15, qword [0x1400c9b5c]
add r15, 0x40
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x11
mov r15, qword [0x1400c9b5c]
add r15, 0x41
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x83
mov r15, qword [0x1400c9b5c]
add r15, 0x42
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xfd
mov r15, qword [0x1400c9b5c]
add r15, 0x43
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x15
mov r15, qword [0x1400c9b5c]
add r15, 0x44
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x74
mov r15, qword [0x1400c9b5c]
add r15, 0x45
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xc
mov r15, qword [0x1400c9b5c]
add r15, 0x46
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x83
mov r15, qword [0x1400c9b5c]
add r15, 0x47
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xfd
mov r15, qword [0x1400c9b5c]
add r15, 0x48
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x18
mov r15, qword [0x1400c9b5c]
add r15, 0x49
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x74
mov r15, qword [0x1400c9b5c]
add r15, 0x4a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 7
mov r15, qword [0x1400c9b5c]
add r15, 0x4b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x8b
mov r15, qword [0x1400c9b5c]
add r15, 0x4c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x81
mov r15, qword [0x1400c9b5c]
add r15, 0x4d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xf4
mov r15, qword [0x1400c9b5c]
add r15, 0x4e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 4
mov r15, qword [0x1400c9b5c]
add r15, 0x4f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x50
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x51
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xc3
mov r15, qword [0x1400c9b5c]
add r15, 0x52
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x83
mov r15, qword [0x1400c9b5c]
add r15, 0x53
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x3c
mov r15, qword [0x1400c9b5c]
add r15, 0x54
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x25
mov r15, qword [0x1400c9b5c]
add r15, 0x55
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xc
mov r15, qword [0x1400c9b5c]
add r15, 0x56
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x3f
mov r15, qword [0x1400c9b5c]
add r15, 0x57
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x2a
mov r15, qword [0x1400c9b5c]
add r15, 0x58
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x46
mov r15, qword [0x1400c9b5c]
add r15, 0x59
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 1
mov r15, qword [0x1400c9b5c]
add r15, 0x5a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x75
mov r15, qword [0x1400c9b5c]
add r15, 0x5b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xef
mov r15, qword [0x1400c9b5c]
add r15, 0x5c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xc7
mov r15, qword [0x1400c9b5c]
add r15, 0x5d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x81
mov r15, qword [0x1400c9b5c]
add r15, 0x5e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xf4
mov r15, qword [0x1400c9b5c]
add r15, 0x5f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 4
mov r15, qword [0x1400c9b5c]
add r15, 0x60
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x61
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x62
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x3f
mov r15, qword [0x1400c9b5c]
add r15, 0x63
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x42
mov r15, qword [0x1400c9b5c]
add r15, 0x64
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xf
mov r15, qword [0x1400c9b5c]
add r15, 0x65
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x66
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xeb
mov r15, qword [0x1400c9b5c]
add r15, 0x67
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xe3
mov r15, qword [0x1400c9b5c]
add r15, 0x68
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 0x69
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x6a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x6b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x6c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x6d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x6e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x6f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x83
mov r15, qword [0x1400c9b5c]
add r15, 0x70
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x3c
mov r15, qword [0x1400c9b5c]
add r15, 0x71
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x25
mov r15, qword [0x1400c9b5c]
add r15, 0x72
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x10
mov r15, qword [0x1400c9b5c]
add r15, 0x73
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x3f
mov r15, qword [0x1400c9b5c]
add r15, 0x74
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x2a
mov r15, qword [0x1400c9b5c]
add r15, 0x75
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x46
mov r15, qword [0x1400c9b5c]
add r15, 0x76
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 1
mov r15, qword [0x1400c9b5c]
add r15, 0x77
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x75
mov r15, qword [0x1400c9b5c]
add r15, 0x78
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xa
mov r15, qword [0x1400c9b5c]
add r15, 0x79
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xc7
mov r15, qword [0x1400c9b5c]
add r15, 0x7a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push pe_nt_image_headers64
mov r15, qword [0x1400c9b5c]
add r15, 0x7b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 8
mov r15, qword [0x1400c9b5c]
add r15, 0x7c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 3
mov r15, qword [0x1400c9b5c]
add r15, 0x7d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x7e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x7f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x80
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x81
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push pe_nt_image_headers64
mov r15, qword [0x1400c9b5c]
add r15, 0x82
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x3f
mov r15, qword [0x1400c9b5c]
add r15, 0x83
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xf3
mov r15, qword [0x1400c9b5c]
add r15, 0x84
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xf
mov r15, qword [0x1400c9b5c]
add r15, 0x85
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x10
mov r15, qword [0x1400c9b5c]
add r15, 0x86
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xb0
mov r15, qword [0x1400c9b5c]
add r15, 0x87
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 8
mov r15, qword [0x1400c9b5c]
add r15, 0x88
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 3
mov r15, qword [0x1400c9b5c]
add r15, 0x89
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x8a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0
mov r15, qword [0x1400c9b5c]
add r15, 0x8b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0xc3
mov r15, qword [0x1400c9b5c]
add r15, 0x8c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 0x8d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
sub rsp, 8
push qword [0x1400c9b54]
push 0x1f4
push qword [0x1400c9b5c]
mov r15, qword [0x1400c9cac]
add r15, qword [0x1400c9d84]
mov rax, r15
push rax
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
mov r15, qword [0x1400c9d3c]
add r15, 0x3f00
mov rax, r15
push rax
push qword [0x1400c9b5c]
pop rcx
pop rdx
call fcn.14001fe90
mov qword [0x1400c9ae4], rax
sub rsp, 8
push qword [0x1400c9b54]
push 4
push qword [0x1400c9b5c]
mov r15, qword [0x1400c9cac]
add r15, qword [0x1400c9d84]
add r15, 3
mov rax, r15
push rax
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
mov r15, qword [0x1400c9d3c]
add r15, 0x3f04
mov rax, r15
push rax
push qword [0x1400c9b5c]
pop rcx
pop rdx
call fcn.14001fe90
mov qword [0x1400c9ae4], rax
sub rsp, 8
push qword [0x1400c9b54]
push 4
push qword [0x1400c9b5c]
mov r15, qword [0x1400c9cac]
add r15, qword [0x1400c9d84]
add r15, 0x2f
mov rax, r15
push rax
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
mov r15, qword [0x1400c9d3c]
add r15, 0x3f0c
mov rax, r15
push rax
push qword [0x1400c9b5c]
pop rcx
pop rdx
call fcn.14001fe90
mov qword [0x1400c9ae4], rax
sub rsp, 8
push qword [0x1400c9b54]
push 4
push qword [0x1400c9b5c]
mov r15, qword [0x1400c9cac]
add r15, qword [0x1400c9d84]
add r15, 0x56
mov rax, r15
push rax
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
mov r15, qword [0x1400c9d3c]
add r15, 0x3f10
mov rax, r15
push rax
push qword [0x1400c9b5c]
pop rcx
pop rdx
call fcn.14001fe90
mov qword [0x1400c9ae4], rax
sub rsp, 8
push qword [0x1400c9b54]
push 4
push qword [0x1400c9b5c]
mov r15, qword [0x1400c9cac]
add r15, qword [0x1400c9d84]
add r15, 0x73
mov rax, r15
push rax
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
push 0xe8
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
mov r15, qword [0x1400c9cac]
add r15, qword [0x1400c9d84]
sub r15, qword [0x1400c9d8c]
add r15, 0xfffffffffffffffb
mov rax, r15
push rax
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe90
mov qword [0x1400c9ae4], rax
sub rsp, 8
push qword [0x1400c9b54]
push 8
push qword [0x1400c9b5c]
push qword [0x1400c9d8c]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
push 0xe8
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
mov r15, qword [0x1400c9cac]
add r15, qword [0x1400c9d84]
add r15, 0x20
sub r15, qword [0x1400c9da4]
add r15, 0xfffffffffffffffb
mov rax, r15
push rax
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe90
mov qword [0x1400c9ae4], rax
sub rsp, 8
push qword [0x1400c9b54]
push 6
push qword [0x1400c9b5c]
push qword [0x1400c9da4]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
push 0xe8
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
mov r15, qword [0x1400c9cac]
add r15, qword [0x1400c9d84]
add r15, 0x70
sub r15, qword [0x1400c9dc4]
add r15, 0xfffffffffffffffb
mov rax, r15
push rax
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001fe90
mov qword [0x1400c9ae4], rax
sub rsp, 8
push qword [0x1400c9b54]
push 8
push qword [0x1400c9b5c]
push qword [0x1400c9dc4]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
mov qword [0x1400c9e0c], 0
mov rax, 0xff
cmp rax, qword [0x1400c9e0c]
jl 0x140007c99
push qword [0x1400c9e0c]
pop rcx
call sub.USER32.DLL_GetAsyncKeyState
inc qword [0x1400c9e0c]
jno 0x140007c74
call sub.KERNEL32.dll_IsDebuggerPresent
and rax, rax
je 0x140007ca9
push 0x55009553
ret
push 0x32
pop rcx
call fcn.140015758
mov qword [0x1400c9e14], rax
mov r15, qword [0x1400c9e14]
cmp r15, 0x19
jne 0x140007d9c
mov r15, qword [0x1400c9bbc]
cmp r15, qword [0x1400c9bcc]
jne 0x140007cf6
mov r15, qword [0x1400c9bbc]
and r15, r15
je 0x140007cf6
mov r15, qword [0x1400c9bcc]
and r15, r15
je 0x140007cf6
jmp 0x140007cff
mov rax, 1
jmp 0x140007d02
xor rax, rax
and rax, rax
je 0x140007d9c
push 0xff
pop rcx
call fcn.140015758
mov qword [0x1400c9d44], rax
push 0x190
pop rcx
call fcn.140015758
mov qword [0x1400c9d4c], rax
push qword [0x1400c9d44]
push qword [0x1400c9b5c]
pop rcx
pop rdx
call fcn.14001fe10
mov qword [0x1400c9ae4], rax
sub rsp, 8
push qword [0x1400c9b54]
push 1
push qword [0x1400c9b5c]
mov r15, qword [0x1400c9d3c]
add r15, qword [0x1400c9d4c]
add r15, 0x1091
mov rax, r15
push rax
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
call fcn.14000ceba
mov qword [0x1400c9e1c], 1
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9e24], rax
mov r15, qword [0x1400c9e24]
and r15, r15
je 0x140007f9d
push qword [0x1400c9e2c]
xor r15, r15
cmp r15, qword [rsp]
jne 0x140007eea
mov qword [0x1400c9e2c], 1
sub rsp, 8
push 1
push qword [0x1400c9b5c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe90
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 4
push qword [0x1400c9b5c]
mov r15, qword [0x1400c9d3c]
add r15, 0x3f00
mov rax, r15
push rax
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
jmp 0x140007f9c
mov r15, 1
cmp r15, qword [rsp]
jne 0x140007f9c
mov qword [0x1400c9e2c], 0
sub rsp, 8
push 0
push qword [0x1400c9b5c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe90
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 4
push qword [0x1400c9b5c]
mov r15, qword [0x1400c9d3c]
add r15, 0x3f00
mov rax, r15
push rax
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
pop rax
mov qword [0x1400c9e1c], 2
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9e34], rax
mov r15, qword [0x1400c9e34]
and r15, r15
je 0x140008108
push 1
push qword [0x1400c9b5c]
pop rcx
pop rdx
call fcn.14001fe90
mov qword [0x1400c9ae4], rax
sub rsp, 8
push qword [0x1400c9b54]
push 4
push qword [0x1400c9b5c]
mov r15, qword [0x1400c9d3c]
add r15, 0x3f0c
mov rax, r15
push rax
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
push 0
pop rcx
call fcn.140013ba0
push 0x12c
pop rcx
call fcn.140015690
push 0
push qword [0x1400c9b5c]
pop rcx
pop rdx
call fcn.14001fe90
mov qword [0x1400c9ae4], rax
sub rsp, 8
push qword [0x1400c9b54]
push 4
push qword [0x1400c9b5c]
mov r15, qword [0x1400c9d3c]
add r15, 0x3f0c
mov rax, r15
push rax
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c9ae4], rax
mov qword [0x1400c9e1c], 3
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9e3c], rax
mov r15, qword [0x1400c9e3c]
and r15, r15
je 0x140008355
push qword [0x1400c9e44]
xor r15, r15
cmp r15, qword [rsp]
jne 0x14000827c
mov qword [0x1400c9e44], 1
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 2
push qword [0x1400c9b5c]
push qword [0x1400c9dac]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
jmp 0x140008354
mov r15, 1
cmp r15, qword [rsp]
jne 0x140008354
mov qword [0x1400c9e44], 0
sub rsp, 8
push 0xff
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0xca
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 2
push qword [0x1400c9b5c]
push qword [0x1400c9dac]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
pop rax
mov qword [0x1400c9e1c], 4
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9e4c], rax
mov r15, qword [0x1400c9e4c]
and r15, r15
je 0x140008b0e
push qword [0x1400c9e54]
xor r15, r15
cmp r15, qword [rsp]
jne 0x14000877f
mov qword [0x1400c9e54], 1
sub rsp, 8
push 0xe9
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0xcc
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 8
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 9
push qword [0x1400c9b5c]
push qword [0x1400c9d94]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 7
push qword [0x1400c9b5c]
push qword [0x1400c9d9c]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
jmp 0x140008b0d
mov r15, 1
cmp r15, qword [rsp]
jne 0x140008b0d
mov qword [0x1400c9e54], 0
sub rsp, 8
push 0x75
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x17
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x40
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x38
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0xaf
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0xf4
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0xb
mov r15, qword [0x1400c9b5c]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
mov r15, qword [0x1400c9b5c]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
mov r15, qword [0x1400c9b5c]
add r15, 8
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 9
push qword [0x1400c9b5c]
push qword [0x1400c9d94]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x44
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x89
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0xb6
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x48
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 4
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
mov r15, qword [0x1400c9b5c]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 7
push qword [0x1400c9b5c]
push qword [0x1400c9d9c]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
pop rax
mov qword [0x1400c9e1c], 5
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9e5c], rax
mov r15, qword [0x1400c9e5c]
and r15, r15
je 0x140008fdf
push qword [0x1400c9e64]
xor r15, r15
cmp r15, qword [rsp]
jne 0x140008dc4
mov qword [0x1400c9e64], 1
sub rsp, 8
push 0xf
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x57
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0xd2
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 8
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 9
push qword [0x1400c9b5c]
push qword [0x1400c9db4]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
jmp 0x140008fde
mov r15, 1
cmp r15, qword [rsp]
jne 0x140008fde
mov qword [0x1400c9e64], 0
sub rsp, 8
push 0xf3
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0xf
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x5d
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x94
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x24
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0xc0
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
mov r15, qword [0x1400c9b5c]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
mov r15, qword [0x1400c9b5c]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
mov r15, qword [0x1400c9b5c]
add r15, 8
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 9
push qword [0x1400c9b5c]
push qword [0x1400c9db4]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
pop rax
mov qword [0x1400c9e1c], 6
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9e6c], rax
mov r15, qword [0x1400c9e6c]
and r15, r15
je 0x140009340
push qword [0x1400c9e74]
xor r15, r15
cmp r15, qword [rsp]
jne 0x1400091dd
mov qword [0x1400c9e74], 1
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 5
push qword [0x1400c9b5c]
push qword [0x1400c9dbc]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
jmp 0x14000933f
mov r15, 1
cmp r15, qword [rsp]
jne 0x14000933f
mov qword [0x1400c9e74], 0
sub rsp, 8
push 0xf3
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0xf
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x10
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x45
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x67
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 5
push qword [0x1400c9b5c]
push qword [0x1400c9dbc]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
pop rax
mov qword [0x1400c9e1c], 7
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9e7c], rax
mov r15, qword [0x1400c9e7c]
and r15, r15
je 0x140009541
push qword [0x1400c9e84]
xor r15, r15
cmp r15, qword [rsp]
jne 0x14000948e
mov qword [0x1400c9e84], 1
sub rsp, 8
push 1
push qword [0x1400c9b5c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe90
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 4
push qword [0x1400c9b5c]
mov r15, qword [0x1400c9d3c]
add r15, 0x3f10
mov rax, r15
push rax
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
jmp 0x140009540
mov r15, 1
cmp r15, qword [rsp]
jne 0x140009540
mov qword [0x1400c9e84], 0
sub rsp, 8
push 0
push qword [0x1400c9b5c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe90
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 4
push qword [0x1400c9b5c]
mov r15, qword [0x1400c9d3c]
add r15, 0x3f10
mov rax, r15
push rax
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
pop rax
mov qword [0x1400c9e1c], 8
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9e8c], rax
mov r15, qword [0x1400c9e8c]
and r15, r15
je 0x1400099b6
push qword [0x1400c9e94]
xor r15, r15
cmp r15, qword [rsp]
jne 0x1400097c9
mov qword [0x1400c9e94], 1
sub rsp, 8
push 0xf
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x57
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0xc9
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 8
push qword [0x1400c9b5c]
push qword [0x1400c9dcc]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
jmp 0x1400099b5
mov r15, 1
cmp r15, qword [rsp]
jne 0x1400099b5
mov qword [0x1400c9e94], 0
sub rsp, 8
push 0xf3
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0xf
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x10
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x8b
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x28
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 6
mov r15, qword [0x1400c9b5c]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
mov r15, qword [0x1400c9b5c]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
mov r15, qword [0x1400c9b5c]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 8
push qword [0x1400c9b5c]
push qword [0x1400c9dcc]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
pop rax
mov qword [0x1400c9e1c], 9
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9e9c], rax
mov r15, qword [0x1400c9e9c]
and r15, r15
je 0x140009d17
push qword [0x1400c9ea4]
xor r15, r15
cmp r15, qword [rsp]
jne 0x140009bb4
mov qword [0x1400c9ea4], 1
sub rsp, 8
push 0xc3
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 5
push qword [0x1400c9b5c]
push qword [0x1400c9dd4]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
jmp 0x140009d16
mov r15, 1
cmp r15, qword [rsp]
jne 0x140009d16
mov qword [0x1400c9ea4], 0
sub rsp, 8
push 0x48
mov r15, qword [0x1400c9b5c]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x89
mov r15, qword [0x1400c9b5c]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x5c
mov r15, qword [0x1400c9b5c]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 0x24
mov r15, qword [0x1400c9b5c]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 8
mov r15, qword [0x1400c9b5c]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001fe10
add rsp, 0x28
mov qword [0x1400c9ae4], rax
push qword [0x1400c9b54]
push 5
push qword [0x1400c9b5c]
push qword [0x1400c9dd4]
push qword [0x1400c9d5c]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c9ae4], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140013ba0
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140015690
add rsp, 0x28
pop rax
mov qword [0x1400c9e1c], 0xa
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9eac], rax
mov r15, qword [0x1400c9eac]
and r15, r15
je 0x140009da8
mov qword [0x1400c9e1c], 0xb
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9eb4], rax
mov r15, qword [0x1400c9eb4]
and r15, r15
je 0x140009e39
mov qword [0x1400c9e1c], 0xc
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9ebc], rax
mov r15, qword [0x1400c9ebc]
and r15, r15
je 0x140009eca
mov qword [0x1400c9e1c], 0xd
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9ec4], rax
mov r15, qword [0x1400c9ec4]
and r15, r15
je 0x140009f5b
mov qword [0x1400c9e1c], 0xe
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9ecc], rax
mov r15, qword [0x1400c9ecc]
and r15, r15
je 0x140009fec
mov qword [0x1400c9e1c], 0xf
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9ed4], rax
mov r15, qword [0x1400c9ed4]
and r15, r15
je 0x14000a07d
mov qword [0x1400c9e1c], 0x10
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9edc], rax
mov r15, qword [0x1400c9edc]
and r15, r15
je 0x14000a10e
mov qword [0x1400c9e1c], 0x11
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9ee4], rax
mov r15, qword [0x1400c9ee4]
and r15, r15
je 0x14000a19f
mov qword [0x1400c9e1c], 0x12
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9eec], rax
mov r15, qword [0x1400c9eec]
and r15, r15
je 0x14000a230
mov qword [0x1400c9e1c], 0x13
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9ef4], rax
mov r15, qword [0x1400c9ef4]
and r15, r15
je 0x14000a2c1
mov qword [0x1400c9e1c], 0x14
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca66c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca65c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca64c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c9e1c]
mov rbp, qword [0x1400ca63c]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000f40c
mov qword [0x1400c9efc], rax
mov r15, qword [0x1400c9efc]
and r15, r15
je 0x14000a352
mov qword [0x1400c9e24], 0
mov qword [0x1400c9e34], 0
mov qword [0x1400c9e3c], 0
mov qword [0x1400c9e4c], 0
mov qword [0x1400c9e5c], 0
mov qword [0x1400c9e6c], 0
mov qword [0x1400c9e7c], 0
mov qword [0x1400c9e8c], 0
mov qword [0x1400c9e9c], 0
mov qword [0x1400c9eac], 0
mov qword [0x1400c9eb4], 0
mov qword [0x1400c9ebc], 0
mov qword [0x1400c9ec4], 0
mov qword [0x1400c9ecc], 0
mov qword [0x1400c9ed4], 0
mov qword [0x1400c9edc], 0
mov qword [0x1400c9ee4], 0
mov qword [0x1400c9eec], 0
mov qword [0x1400c9ef4], 0
mov qword [0x1400c9efc], 0
mov r15, qword [0x1400c9c0c]
cmp r15, 0x45a2a5
je 0x14000a44f
push 0
push 3
pop rcx
pop rdx
call fcn.1400190b0
call fcn.14000bc2c
push 1
pop rcx
call fcn.140015690
mov r15, qword [0x1400c9bbc]
cmp r15, qword [0x1400c9bcc]
jne 0x14000a489
mov r15, qword [0x1400c9bbc]
and r15, r15
je 0x14000a489
mov r15, qword [0x1400c9bcc]
and r15, r15
je 0x14000a489
jmp 0x14000a492
mov rax, 1
jmp 0x14000a495
xor rax, rax
and rax, rax
je 0x14000a500
push 0xa
pop rcx
call fcn.140015758
mov r15, rax
add r15, 0xa
mov qword [0x1400c9d44], r15
push 0x28
pop rcx
call fcn.140015758
mov r15, rax
add r15, 0x28
mov qword [0x1400c9d4c], r15
mov r15, qword [0x1400c9cac]
add r15, qword [0x1400c9d44]
mov qword [0x1400c9cac], r15
mov r15, qword [0x1400c9d3c]
add r15, qword [0x1400c9d4c]
mov qword [0x1400c9d3c], r15
call fcn.14000ceba
jmp 0x140005660
jmp 0x140007c69
call 0x14000e81a
call fcn.140020aa0
mov rcx, qword [0x1400c9abc]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x1400c9acc]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.140013d0c
call fcn.140015b20
call fcn.140017960
call fcn.140019628
call fcn.14001bad0
call fcn.14001be04
call fcn.14001c050
call fcn.14001d5c4
call fcn.14001e608
call fcn.14001fdd0
add rsp, 0x28
ret