Function at 0x14000a33e
Capabilities:
Log keystrokes via polling

Disassembly:
sub rsp, 0x28
push 0
pop rcx
call fcn.14001767c
mov r15, rax
add r15, 0x133
mov qword [0x1400c397c], r15
push 0
pop rcx
call fcn.1400176f0
mov r15, rax
add r15, 0x14f
mov qword [0x1400c3984], r15
sub rsp, 8
push 0xffffffffffff0001
push 0xffffffffffff0001
push qword [0x1400c3984]
push qword [0x1400c397c]
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400176f8
add rsp, 0x30
push 0xa
pop rcx
call fcn.140017854
mov rax, rax
mov dword [0x1400c3c14], eax
call fcn.140017a78
mov r15, rax
and r15, r15
jne 0x14000b5b7
mov qword [0x1400c398c], 0
movsxd r15, dword [0x1400c3c14]
cmp r15, 0x332c
jne 0x14000b501
call fcn.140017a94
mov qword [0x1400c398c], rax
mov r15, qword [0x1400c398c]
cmp r15, 1
jne 0x14000a40e
jmp 0x14000cf0a
mov r15, qword [0x1400c398c]
cmp r15, 3
jne 0x14000a681
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x14000a5fe
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
movabs rax, str.Trainer_Instructions.
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
push qword [0x1400c4620]
sub rsp, 8
push 0
movabs rax, 0x14007202a
push rax
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140019604
add rsp, 0x28
movabs rcx, str.help.txt
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
movabs rax, str.notepad.exe
push rax
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012fac
add rsp, 0x28
pop qword [0x1400c4620]
mov r15, qword [0x1400c398c]
cmp r15, 4
jne 0x14000a89b
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x14000a871
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
movabs rax, str.Trainer_Troubleshooting.
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
movabs rax, 0x14007202a
push rax
movabs rax, str.www.cheathappens.com_trainer_troubleshooting.asp
push rax
movabs rax, str.iexplore
push rax
pop rcx
pop rdx
pop r8
call fcn.140012fc0
mov r15, qword [0x1400c398c]
cmp r15, 5
jne 0x14000aab5
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x14000aa8b
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
movabs rax, str.Cheathappens_Website.
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
movabs rax, 0x14007202a
push rax
movabs rax, str.www.cheathappens.com
push rax
movabs rax, str.iexplore
push rax
pop rcx
pop rdx
pop r8
call fcn.140012fc0
mov r15, qword [0x1400c398c]
cmp r15, 6
jne 0x14000ad20
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x14000aca5
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
movabs rax, str.Cheathappens_Website.
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
push qword [0x1400c4620]
sub rsp, 8
movabs rax, 0x14007202a
push rax
push qword [0x1400c4620]
movabs rcx, str.http:__www.cheathappens.com_cheat_index.asp_titleID
sub rsp, 0x20
call fcn.14001e410
add rsp, 0x20
mov rcx, qword [0x1400c3484]
sub rsp, 0x20
call fcn.14001e410
add rsp, 0x20
inc qword [0x1400c4620]
movabs rax, str.iexplore
push rax
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140012fc0
add rsp, 0x28
pop qword [0x1400c4620]
mov r15, qword [0x1400c398c]
cmp r15, 7
jne 0x14000ad52
mov rbp, qword [0x1400c3fac]
mov r15, qword [rbp + 8]
and r15, r15
je 0x14000ad52
mov r15, qword [0x1400c3994]
and r15, r15
jne 0x14000ad52
mov rax, 1
jmp 0x14000ad55
xor rax, rax
and rax, rax
je 0x14000b501
push 0
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140017ab0
add rsp, 0x28
mov qword [rsp - 8], rax
fild qword [rsp - 8]
fadd qword [0x1400727d8]
fdiv qword [str.fffff]
sub rsp, 8
fstp qword [rsp]
movsd xmm0, qword [rsp]
add rsp, 8
pop rdx
call fcn.140013420
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fadd qword [0x1400727e8]
fistp qword [0x1400c399c]
mov r15, qword [0x1400c399c]
and r15, r15
jle 0x14000ade0
mov r15, qword [0x1400c399c]
cmp r15, qword [0x1400c34a4]
jge 0x14000ade0
mov rax, 1
jmp 0x14000ade3
xor rax, rax
and rax, rax
je 0x14000b1f7
push 1
movabs rax, 0x140072138
push rax
mov r15, qword [0x1400c399c]
inc r15
mov rbp, qword [0x1400c3f8c]
shl r15, 3
push qword [r15 + rbp]
pop rcx
pop rdx
pop r8
call fcn.14000ff30
mov qword [0x1400c39a4], rax
mov r15, qword [0x1400c399c]
inc r15
shl r15, 3
push qword [r15 + rbp]
pop rcx
call fcn.14000f260
mov qword [0x1400c39ac], rax
mov r15, qword [0x1400c39ac]
sub r15, qword [0x1400c39a4]
mov qword [0x1400c39b4], r15
push 5
pop rcx
call fcn.140011b80
push 0x12c
pop rcx
call fcn.140013018
mov qword [0x1400c34ac], 0
mov rax, 0xff
cmp rax, qword [0x1400c34ac]
jl 0x14000aea6
push qword [0x1400c34ac]
pop rcx
call sub.USER32.DLL_GetAsyncKeyState
mov qword [0x1400c355c], rax
inc qword [0x1400c34ac]
jno 0x14000ae7a
mov qword [0x1400c355c], 0
mov qword [0x1400c39bc], 0
mov qword [0x1400c34ac], 3
mov rax, 0xff
cmp rax, qword [0x1400c34ac]
jl 0x14000af0d
push qword [0x1400c34ac]
pop rcx
call sub.USER32.DLL_GetAsyncKeyState
mov qword [0x1400c355c], rax
mov r15, qword [0x1400c355c]
and r15, r15
je 0x14000af04
mov rax, qword [0x1400c34ac]
mov qword [0x1400c39bc], rax
inc qword [0x1400c34ac]
jno 0x14000aec7
mov r15, qword [0x1400c39bc]
and r15, r15
jle 0x14000ae6f
mov r15, qword [0x1400c39bc]
cmp r15, 0x1b
jne 0x14000b111
movabs rdx, 0x14007202a
lea rcx, [0x1400c3494]
call fcn.14001e480
movabs rdx, 0x14007202a
lea rcx, [0x1400c349c]
call fcn.14001e480
mov qword [0x1400c34a4], 0
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c348c]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.Options
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0xa
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140019e60
add rsp, 0x28
pop qword [0x1400c4620]
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
push 0xa
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001a0d0
add rsp, 0x28
movabs rcx, 0x140072094
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
lea rcx, [0x1400c3494]
pop rdx
call fcn.14001e350
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
push 0xa
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001a0d0
add rsp, 0x28
lea rcx, [0x1400c349c]
pop rdx
call fcn.14001e350
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
push 0xa
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001a0d0
add rsp, 0x28
mov r15, qword [0x1400c34a4]
inc r15
mov rbp, qword [0x1400c3f8c]
shl r15, 3
lea rcx, [r15 + rbp]
pop rdx
call fcn.14001e350
inc qword [0x1400c34a4]
push 0xa
pop rcx
call fcn.14001a240
mov r15, rax
cmp r15, 1
jne 0x14000b040
push 0xa
pop rcx
call fcn.140019940
push 1
pop rcx
call fcn.140011b80
push 0x12c
pop rcx
call fcn.140013018
mov qword [0x1400c34ac], 1
mov rax, 0x14
cmp rax, qword [0x1400c34ac]
jl 0x14000b10c
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3fec]
shl r15, 3
push qword [r15 + rbp]
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3fac]
shl r15, 3
pop qword [r15 + rbp]
inc qword [0x1400c34ac]
jno 0x14000b0c7
jmp 0x14000b1f7
push 0x64
pop rcx
call fcn.140013018
push qword [0x1400c4620]
movabs rcx, 0x140072510
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
mov r15, qword [0x1400c39bc]
mov rbp, qword [0x1400c3f9c]
shl r15, 3
mov rcx, qword [r15 + rbp]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, 0x140072138
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
mov rdx, qword [0x1400c4620]
push rdx
push rdx
push qword [0x1400c39b4]
mov r15, qword [0x1400c399c]
inc r15
mov rbp, qword [0x1400c3f8c]
shl r15, 3
push qword [r15 + rbp]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000f7f0
add rsp, 0x20
pop rax
mov r15, qword [0x1400c399c]
inc r15
shl r15, 3
lea rcx, [r15 + rbp]
pop rdx
call fcn.14001e350
push qword [0x1400c39bc]
mov r15, qword [0x1400c399c]
mov rbp, qword [0x1400c3fac]
shl r15, 3
pop qword [r15 + rbp]
push 0
pop rcx
call fcn.140011b80
push 0x12c
pop rcx
call fcn.140013018
push 0x120
fld dword [0x1400c3c2c]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
fld dword [0x1400c3c28]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x14000b501
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x44
push 0x44
push 0x44
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0x10e
push 0x12b
push 0x41
push 2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
mov qword [0x1400c34ac], 1
mov rax, qword [0x1400c34a4]
cmp rax, qword [0x1400c34ac]
jl 0x14000b36f
push 0xff
push 0
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3f8c]
shl r15, 3
push qword [r15 + rbp]
mov r15, qword [0x1400c34ac]
imul r15, r15, 0x1a
add r15, 0xffffffffffffffe8
mov rax, r15
push rax
push 2
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
inc qword [0x1400c34ac]
jno 0x14000b2fa
mov qword [0x1400c34ac], 1
mov rax, qword [0x1400c34a4]
cmp rax, qword [0x1400c34ac]
jl 0x14000b3ef
push 0xff
push 0xff
push 0xff
push 0xff
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3f8c]
shl r15, 3
push qword [r15 + rbp]
mov r15, qword [0x1400c34ac]
imul r15, r15, 0x1a
add r15, 0xffffffffffffffe6
mov rax, r15
push rax
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
inc qword [0x1400c34ac]
jno 0x14000b37a
call fcn.14001ac00
push 0
fld dword [0x1400c3c34]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
fld dword [0x1400c3c30]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
fld dword [0x1400c3c34]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
fld dword [0x1400c3c30]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
push 0x43
push 7
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
movsxd r15, dword [0x1400c3c14]
cmp r15, 0x201
jne 0x14000b5b7
sub rsp, 8
push 0xffffffffffff0001
push 0xffffffffffff0001
push 0
push 0xfffffffffffffc18
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400176f8
add rsp, 0x30
call fcn.140017a94
mov qword [0x1400c398c], rax
mov r15, qword [0x1400c398c]
cmp r15, 2
jne 0x14000b55e
push 0
pop rcx
call fcn.140017b30
mov qword [0x1400c39c4], rax
push 0
pop rcx
call fcn.140017ab0
mov qword [0x1400c39cc], rax
push 0
push 2
push 0xa1
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.DLL_SendMessageA
call sub.KERNEL32.dll_IsDebuggerPresent
and rax, rax
je 0x14000b5c7
push 0x55009553
ret
add rsp, 0x28
ret