Function at 0x1400cc710
Capabilities:
Create thread
Enumerate gui resources
Hide graphical window
Log keystrokes via polling
Set console window title
Terminate process

Disassembly:
sub rsp, 0x698
mov rax, qword [0x140231200]
xor rax, rsp
mov qword [rsp + 0x680], rax
lea rcx, str.PUBG_Mobile_Helper
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, str.Color_C
call fcn.14013db34
lea rcx, str.MODE_Con_Cols56_lines16
call fcn.14013db34
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x80], rax
lea rdx, str.Welcome_back_to_PUBG_Mobile_Helper..._n
lea rcx, [rsp + 0x388]
call fcn.1400cd660
mov qword [rsp + 0x88], rax
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
call fcn.1400cdb60
mov qword [rsp + 0x90], rax
mov edx, 4
mov rcx, qword [rsp + 0x90]
call fcn.1400cc450
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov edx, 5
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, str.C:DUNE.sys
lea rcx, [rsp + 0x3f0]
call fcn.140011d90
nop
lea rdx, str.DUNE.sys
lea rcx, [rsp + 0x3d0]
call fcn.140011d90
nop
lea rcx, [rsp + 0x3d0]
call fcn.140011ab0
mov qword [rsp + 0x98], rax
lea rcx, [rsp + 0x3f0]
call fcn.140011ab0
mov qword [rsp + 0xa0], rax
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xa0]
call fcn.140023680
lea rcx, str.aow_exe.exe
call fcn.1400df7d0
mov dword [0x140238310], eax
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0xa8], rax
lea rdx, str.__Chaking_for_Game_Process...__n
lea rcx, [rsp + 0x360]
call fcn.1400cd690
mov qword [rsp + 0xb0], rax
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xb0]
call fcn.1400cda90
mov qword [rsp + 0xb8], rax
mov edx, 4
mov rcx, qword [rsp + 0xb8]
call fcn.1400cc450
cmp dword [0x140238310], 0
jne 0x1400cc8ff
lea rcx, [rsp + 0x3d0]
call fcn.140011ab0
mov rcx, rax
call fcn.1400238f0
lea rdx, str.Cant_find_game_process_id__press_any_key_to_exit
lea rcx, [0x140236980]
call fcn.140015eb0
mov qword [rsp + 0xc0], rax
lea rdx, [0x140015e20]
mov rcx, qword [rsp + 0xc0]
call fcn.140010b10
lea rcx, [0x1402157f8]
call fcn.14013db34
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov r8d, dword [0x140238310]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140238318], rax
cmp qword [0x140238318], 0
jne 0x1400cc97c
lea rcx, [rsp + 0x3d0]
call fcn.140011ab0
mov rcx, rax
call fcn.1400238f0
lea rdx, str.Cant_find_game_process__press_any_key_to_exit
lea rcx, [0x140236980]
call fcn.140015eb0
mov qword [rsp + 0xc8], rax
lea rdx, [0x140015e20]
mov rcx, qword [rsp + 0xc8]
call fcn.140010b10
lea rcx, [0x140215830]
call fcn.14013db34
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor edx, edx
lea rcx, [0x1400cd790]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [0x1402382f0]
call qword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x1400cc9ae
mov edx, 9
mov rcx, qword [0x1402382f0]
call qword [sym.imp.USER32.dll_ShowWindow]
lea r9, str.AEngineRenderWindow
lea r8, str.AEngineRenderWindowClass
xor edx, edx
mov rcx, qword [0x1402382f0]
call qword [sym.imp.USER32.dll_FindWindowExW]
mov qword [0x1402382f0], rax
lea rax, [rsp + 0x318]
mov qword [rsp + 0xd0], rax
lea rdx, str.__Chaking_for_Game_Window...__n
lea rcx, [rsp + 0x338]
call fcn.1400cd6c0
mov qword [rsp + 0xd8], rax
mov rdx, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xd8]
call fcn.1400cd9c0
mov qword [rsp + 0xe0], rax
mov edx, 4
mov rcx, qword [rsp + 0xe0]
call fcn.1400cc450
cmp qword [0x1402382f0], 0
jne 0x1400cca8f
lea rcx, [rsp + 0x3d0]
call fcn.140011ab0
mov rcx, rax
call fcn.1400238f0
lea rdx, str.Cant_find_game_window__pls_start_game_properly_then_run_cheat_again
lea rcx, [0x140236980]
call fcn.140015eb0
mov qword [rsp + 0xe8], rax
lea rdx, [0x140015e20]
mov rcx, qword [rsp + 0xe8]
call fcn.140010b10
lea rcx, str.pause__nul
call fcn.14013db34
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rsp + 0x4c], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rsp + 0x48], eax
lea rdx, [rsp + 0x3b0]
mov rcx, qword [0x1402382f0]
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp dword [rsp + 0x3b0], 0
jl 0x1400ccae7
cmp dword [rsp + 0x3b4], 0
jl 0x1400ccae7
cmp dword [rsp + 0x3b8], 0
jl 0x1400ccae7
cmp dword [rsp + 0x3bc], 0
jge 0x1400ccb64
lea rdx, [rsp + 0x3c0]
mov rcx, qword [0x1402382f0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rsp + 0x3c0]
mov ecx, dword [rsp + 0x3c8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x3c4]
mov ecx, dword [rsp + 0x3cc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x30], 3
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x3c4]
mov r8d, dword [rsp + 0x3c0]
mov rdx, 0xffffffffffffffff
mov rcx, qword [0x140238290]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov edx, 0x70000000
mov ecx, 0x50000000
call fcn.140005f90
mov dword [0x1402381dc], eax
lea rdx, str.__n__ViewMatrixBase:
lea rcx, [0x140236980]
call fcn.140015eb0
mov qword [rsp + 0xf0], rax
lea rdx, [0x1400c92c0]
mov rcx, qword [rsp + 0xf0]
call fcn.1400408a0
mov qword [rsp + 0xf8], rax
lea rdx, [0x1400c92f0]
mov rcx, qword [rsp + 0xf8]
call fcn.1400408a0
mov qword [rsp + 0x100], rax
mov eax, dword [0x1402381dc]
mov dword [rsp + 0x78], eax
mov edx, dword [rsp + 0x78]
mov rcx, qword [rsp + 0x100]
call fcn.1400cdf20
mov eax, dword [rsp + 0x3b4]
mov ecx, dword [rsp + 0x3bc]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x3b0]
mov edx, dword [rsp + 0x3b8]
sub edx, ecx
mov ecx, edx
mov r9d, eax
mov r8d, ecx
mov edx, dword [rsp + 0x3b4]
mov ecx, dword [rsp + 0x3b0]
call fcn.140025080
mov r8d, dword [0x14023829c]
mov edx, dword [0x1402382a0]
mov rcx, qword [0x140238290]
call fcn.140023ae0
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], 0x14
mov qword [rsp + 0x20], 0x10
mov r9d, 8
mov r8d, 0x488
mov edx, 0x38f0
lea rcx, str.1.91.0_WIP
call fcn.1400693c0
xor ecx, ecx
call fcn.140053570
call fcn.140055400
mov qword [rsp + 0x40], rax
call fcn.1400d77a0
lea rcx, [rsp + 0x4d0]
call fcn.14008c6d0
lea rcx, [rsp + 0x5f0]
call fcn.14008c6d0
lea rcx, [rsp + 0x440]
call fcn.14008c6d0
mov byte [rsp + 0x488], 1
lea rcx, [rsp + 0x560]
call fcn.14008c6d0
mov byte [rsp + 0x56c], 0
mov byte [rsp + 0x518], 1
mov byte [rsp + 0x4f0], 1
mov dword [rsp + 0x4e8], 2
mov dword [rsp + 0x4ec], 2
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x108], rax
lea rax, [0x14021c998]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x560]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14021d34c]
mov r8d, 0x26a20
lea rdx, [0x14019e980]
mov rcx, qword [rsp + 0x108]
call fcn.14008d260
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x110], rax
lea rax, [0x14021c7c0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x4d0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14021d34c]
mov r8d, 0x317f8
lea rdx, [0x1401e3a40]
mov rcx, qword [rsp + 0x110]
call fcn.14008d260
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x120], rax
lea rdx, str.C:WindowsFonts_arialbd.ttf
lea rcx, [rsp + 0x238]
call fcn.1400cd6f0
mov rcx, rax
call fcn.1400cd720
mov qword [rsp + 0x118], rax
lea rax, [0x14021c998]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x560]
movss xmm2, dword [0x14021d34c]
mov rdx, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x120]
call fcn.14008d060
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x130], rax
lea rdx, str.C:Windows_fontsmsjhbd.ttc
lea rcx, [rsp + 0x1b8]
call fcn.1400cd740
mov rcx, rax
call fcn.1400cd770
mov qword [rsp + 0x128], rax
lea rax, [0x14021cd20]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x440]
movss xmm2, dword [0x14021d344]
mov rdx, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x130]
call fcn.14008d060
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x140], rax
lea rdx, [0x140215980]
lea rcx, [rsp + 0x1d8]
call fcn.1400cd740
mov rcx, rax
call fcn.1400cd770
mov qword [rsp + 0x138], rax
lea rax, [0x14021c998]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x440]
movss xmm2, dword [0x14021d364]
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x140]
call fcn.14008d060
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x150], rax
lea rdx, str.C:Windows_fontsNirmala.ttf
lea rcx, [rsp + 0x258]
call fcn.1400cd6f0
mov rcx, rax
call fcn.1400cd720
mov qword [rsp + 0x148], rax
lea rax, [0x14021c5a8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x440]
movss xmm2, dword [0x14021d364]
mov rdx, qword [rsp + 0x148]
mov rcx, qword [rsp + 0x150]
call fcn.14008d060
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x160], rax
lea rdx, str.C:Windows_fonts_tahoma.ttf
lea rcx, [rsp + 0x1f8]
call fcn.1400cd740
mov rcx, rax
call fcn.1400cd770
mov qword [rsp + 0x158], rax
lea rax, [0x14021c998]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x440]
movss xmm2, dword [0x14021d364]
mov rdx, qword [rsp + 0x158]
mov rcx, qword [rsp + 0x160]
call fcn.14008d060
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x170], rax
lea rdx, str.C:Windows_fontsmmrtext.ttf
lea rcx, [rsp + 0x278]
call fcn.1400cd6f0
mov rcx, rax
call fcn.1400cd720
mov qword [rsp + 0x168], rax
lea rax, [0x14021c998]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x440]
movss xmm2, dword [0x14021d37c]
mov rdx, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x170]
call fcn.14008d060
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x180], rax
lea rdx, [0x140215a00]
lea rcx, [rsp + 0x298]
call fcn.1400cd6f0
mov rcx, rax
call fcn.1400cd720
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x4d0]
movss xmm2, dword [0x14021d364]
mov rdx, qword [rsp + 0x178]
mov rcx, qword [rsp + 0x180]
call fcn.14008d060
mov qword [0x140238250], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x190], rax
lea rdx, str.C:WindowsFonts_tahoma.ttf
lea rcx, [rsp + 0x218]
call fcn.1400cd740
mov rcx, rax
call fcn.1400cd770
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
movss xmm2, dword [0x14021d344]
mov rdx, qword [rsp + 0x188]
mov rcx, qword [rsp + 0x190]
call fcn.14008d060
mov qword [0x140238268], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x198], rax
lea rax, [0x14021c998]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x560]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14021d368]
mov r8d, 0x26a20
lea rdx, [0x14019e980]
mov rcx, qword [rsp + 0x198]
call fcn.14008d260
mov qword [0x140238270], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x1a8], rax
lea rdx, str.C:WindowsFonts_segoeui.ttf
lea rcx, [rsp + 0x2b8]
call fcn.1400cd6f0
mov rcx, rax
call fcn.1400cd720
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
movss xmm2, dword [0x14021d34c]
mov rdx, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1a8]
call fcn.14008d060
mov qword [0x140238260], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x1b0], rax
lea rax, [0x14021cb28]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x5f0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14021d348]
mov r8d, 0x1e695
lea rdx, [0x1401c53a0]
mov rcx, qword [rsp + 0x1b0]
call fcn.14008d3a0
mov qword [0x1402381f8], rax
call fcn.1400cc4a0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x14000c8b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1402382f8], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1400d68f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1402382f8], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x14002fb40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x140238300], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1400d6d30]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x140238308], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1400cc690]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140238290]
call fcn.140097010
mov rcx, qword [0x140238258]
call fcn.140096490
xor eax, eax
cmp eax, 1
je 0x1400cd61b
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x140238290]
lea rcx, [rsp + 0x410]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400cd31f
lea rcx, [rsp + 0x410]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x410]
call qword [sym.imp.USER32.dll_DispatchMessageA]
movzx eax, byte [0x14023226e]
test eax, eax
je 0x1400cd337
mov rcx, qword [0x140238290]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [0x14023235c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x1400cd373
movzx eax, byte [0x140232235]
test eax, eax
jne 0x1400cd360
mov dword [rsp + 0x50], 1
jmp 0x1400cd368
mov dword [rsp + 0x50], 0
movzx eax, byte [rsp + 0x50]
mov byte [0x140232235], al
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x1400cd457
movzx eax, byte [0x140231e91]
cmp eax, 1
jne 0x1400cd3f6
mov rdx, qword [0x140238290]
xor ecx, ecx
call fcn.1400e0120
movzx eax, byte [0x140231e91]
test eax, eax
jne 0x1400cd3b9
mov dword [rsp + 0x54], 1
jmp 0x1400cd3c1
mov dword [rsp + 0x54], 0
movzx eax, byte [rsp + 0x54]
mov byte [0x140231e91], al
movzx eax, byte [0x14023226e]
test eax, eax
jne 0x1400cd3e1
mov dword [rsp + 0x58], 1
jmp 0x1400cd3e9
mov dword [rsp + 0x58], 0
movzx eax, byte [rsp + 0x58]
mov byte [0x14023226e], al
jmp 0x1400cd457
mov rdx, qword [0x140238290]
mov ecx, 1
call fcn.1400e0120
movzx eax, byte [0x140231e91]
test eax, eax
jne 0x1400cd41c
mov dword [rsp + 0x5c], 1
jmp 0x1400cd424
mov dword [rsp + 0x5c], 0
movzx eax, byte [rsp + 0x5c]
mov byte [0x140231e91], al
movzx eax, byte [0x14023226e]
test eax, eax
jne 0x1400cd444
mov dword [rsp + 0x60], 1
jmp 0x1400cd44c
mov dword [rsp + 0x60], 0
movzx eax, byte [rsp + 0x60]
mov byte [0x14023226e], al
movzx eax, byte [0x140232126]
test eax, eax
je 0x1400cd476
mov edx, 0x11
mov rcx, qword [0x140238290]
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
jmp 0x1400cd485
xor edx, edx
mov rcx, qword [0x140238290]
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov ecx, dword [0x140232360]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x1400cd4c1
movzx eax, byte [0x1402382a6]
test eax, eax
jne 0x1400cd4ae
mov dword [rsp + 0x64], 1
jmp 0x1400cd4b6
mov dword [rsp + 0x64], 0
movzx eax, byte [rsp + 0x64]
mov byte [0x1402382a6], al
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x1400cd4fc
movzx eax, byte [0x14023226f]
test eax, eax
jne 0x1400cd4e9
mov dword [rsp + 0x68], 1
jmp 0x1400cd4f1
mov dword [rsp + 0x68], 0
movzx eax, byte [rsp + 0x68]
mov byte [0x14023226f], al
mov ecx, dword [str.swtT]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x1400cd588
movzx eax, byte [0x1402382a5]
test eax, eax
jne 0x1400cd525
mov dword [rsp + 0x6c], 1
jmp 0x1400cd52d
mov dword [rsp + 0x6c], 0
movzx eax, byte [rsp + 0x6c]
mov byte [0x1402382a5], al
movzx eax, byte [0x14023237c]
test eax, eax
jne 0x1400cd54d
mov dword [rsp + 0x70], 1
jmp 0x1400cd555
mov dword [rsp + 0x70], 0
movzx eax, byte [rsp + 0x70]
mov byte [0x14023237c], al
movzx eax, byte [0x140232347]
test eax, eax
jne 0x1400cd575
mov dword [rsp + 0x74], 1
jmp 0x1400cd57d
mov dword [rsp + 0x74], 0
movzx eax, byte [rsp + 0x74]
mov byte [0x140232347], al
mov ecx, dword [0x140232364]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x1400cd5d9
cmp dword [0x140238344], 2
jne 0x1400cd5b1
mov dword [0x140238344], 0
jmp 0x1400cd5d9
cmp dword [0x140238344], 0
jne 0x1400cd5c6
mov dword [0x140238344], 1
jmp 0x1400cd5d9
cmp dword [0x140238344], 1
jne 0x1400cd5d9
mov dword [0x140238344], 2
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x1400cd616
call fcn.1400d5920
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1400cc630]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x1400cd2c6
mov dword [rsp + 0x7c], 0
lea rcx, [rsp + 0x3d0]
call fcn.140011c60
nop
lea rcx, [rsp + 0x3f0]
call fcn.140011c60
mov eax, dword [rsp + 0x7c]
mov rcx, qword [rsp + 0x680]
xor rcx, rsp
call fcn.140121790
add rsp, 0x698
ret