Function at 0x14001ef40
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Log keystrokes via polling
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov eax, dword [0x1400a9028]
mov dword [rbp + 0x90], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14001f006
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14001f006
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14001f001
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14001efe0
cmp r8d, 0x491e0a9c
je 0x14001f00b
test r9d, r9d
jne 0x14001efc0
mov rax, qword [rax]
jmp 0x14001ef90
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
mov eax, 1
lea ecx, [rax + 0x1e]
mov r13d, dword [reloc.WS2_32.dll_accept]
cmp r13d, 2
jl 0x14001f0c6
movdqa xmm3, xmmword [0x1400aaa80]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400aab20]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400aab20]
shufps xmm2, xmm0, 0xdd
movd xmm0, eax
psrad xmm2, xmm0
movd xmm0, ecx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400aaab0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400aab10]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444DYZ_TtpfsrseKoy58888888888888888]
movd xmm0, dword [rbp + 0x90]
xorps xmm2, xmm0
movd dword [rbp + 0x90], xmm2
jmp 0x14001f0ff
lea r9, [rbp + 0x90]
xor r8d, r8d
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x14001f0d0
lea rcx, [rbp + 0x90]
call r11
call fcn.14000c040
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
mov rcx, qword [0x14016b970]
sub rax, rcx
cmp rax, 0x24
jb 0x14001fbae
lea r12, [0x14016b960]
mov r9, r12
cmp qword [0x14016b978], 0x10
cmovae r9, qword [0x14016b960]
mov qword [rsp + 0x30], Ordinal_41
lea rax, str._1__Perm_Tournaments__Recommended___n
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x50]
call fcn.140028780
nop
lea rbx, [rsp + 0x50]
mov rdi, qword [rsp + 0x50]
mov r15, qword [rsp + 0x68]
cmp r15, 0x10
cmovae rbx, rdi
lea r14, [rsp + 0x50]
cmovae r14, rdi
add r14, qword [rsp + 0x60]
cmp rbx, r14
je 0x14001f1e3
mov qword [rbp + 0x90], 0xa
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140025f20
lea rdx, [0x1400260f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x90]
call fcn.140025d90
inc rbx
cmp rbx, r14
jne 0x14001f1b0
cmp r15, 0x10
jb 0x14001f21a
lea rdx, [r15 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001f212
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f4de
mov rcx, rdi
call fcn.14009489c
mov rax, rsi
mov rcx, qword [0x14016b970]
sub rax, rcx
cmp rax, 0x11
jb 0x14001fbae
cmp qword [0x14016b978], 0x10
cmovae r12, qword [0x14016b960]
mov qword [rsp + 0x30], reloc.WS2_32.dll_recvfrom
lea rax, str._2__Perm_Custom__n
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9, r12
lea rcx, [rsp + 0x70]
call fcn.140028780
nop
lea rbx, [rsp + 0x70]
mov rdi, qword [rsp + 0x70]
mov r15, qword [rbp - 0x78]
cmp r15, 0x10
cmovae rbx, rdi
lea r14, [rsp + 0x70]
cmovae r14, rdi
add r14, qword [rbp - 0x80]
cmp rbx, r14
je 0x14001f2d3
mov qword [rbp + 0x90], 0xa
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140025f20
lea rdx, [0x1400260f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x90]
call fcn.140025d90
inc rbx
cmp rbx, r14
jne 0x14001f2a0
cmp r15, 0x10
jb 0x14001f30a
lea rdx, [r15 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001f302
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f4de
mov rcx, rdi
call fcn.14009489c
mov rax, rsi
mov rcx, qword [0x14016b8d0]
sub rax, rcx
cmp rax, 0x13
jb 0x14001fbae
lea r12, [0x14016b8c0]
mov r9, r12
cmp qword [0x14016b8d8], 0x10
cmovae r9, qword [0x14016b8c0]
mov qword [rsp + 0x30], reloc.WS2_32.dll_send
lea rax, str._3__Check_Serials__n
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x70]
call fcn.140028780
nop
lea rbx, [rbp - 0x70]
mov rdi, qword [rbp - 0x70]
mov r15, qword [rbp - 0x58]
cmp r15, 0x10
cmovae rbx, rdi
lea r14, [rbp - 0x70]
cmovae r14, rdi
add r14, qword [rbp - 0x60]
cmp rbx, r14
je 0x14001f3c3
mov qword [rbp + 0x90], 0xa
nop
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140025f20
lea rdx, [0x1400260f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x90]
call fcn.140025d90
inc rbx
cmp rbx, r14
jne 0x14001f390
cmp r15, 0x10
jb 0x14001f3fa
lea rdx, [r15 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001f3f2
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f4de
mov rcx, rdi
call fcn.14009489c
mov rax, qword [0x14016b8d0]
sub rsi, rax
cmp rsi, 8
jb 0x14001fbae
cmp qword [0x14016b8d8], 0x10
cmovae r12, qword [0x14016b8c0]
mov qword [rsp + 0x30], 8
lea rcx, str._4__Exit
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r9, r12
lea rcx, [rbp - 0x50]
call fcn.140028780
nop
lea rbx, [rbp - 0x50]
mov rdi, qword [rbp - 0x50]
mov r14, qword [rbp - 0x38]
cmp r14, 0x10
cmovae rbx, rdi
lea rsi, [rbp - 0x50]
cmovae rsi, rdi
add rsi, qword [rbp - 0x40]
cmp rbx, rsi
je 0x14001f4b3
mov qword [rbp + 0x90], 0xa
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140025f20
lea rdx, [0x1400260f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x90]
call fcn.140025d90
inc rbx
cmp rbx, rsi
jne 0x14001f480
cmp r14, 0x10
jb 0x14001f4f0
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001f4e5
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001f4e5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.14009489c
nop dword [rax]
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14001f5c0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14001f596
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14001f596
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14001f591
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14001f570
cmp r8d, 0xb3c99bd
je 0x14001f59b
test r9d, r9d
jne 0x14001f550
mov rax, qword [rax]
jmp 0x14001f520
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov edx, 0x1f4
mov ecx, edx
call rax
call fcn.140019cc0
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14001fa04
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14001f666
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14001f666
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14001f661
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14001f640
cmp r8d, 0xb3c99bd
je 0x14001f66b
test r9d, r9d
jne 0x14001f620
mov rax, qword [rax]
jmp 0x14001f5f0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov edx, 0x1f4
mov ecx, edx
call rax
movsd xmm0, qword [str.FPC]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x1400a91c8]
mov dword [rsp + 0x48], eax
movzx eax, word [0x1400a91cc]
mov word [rsp + 0x4c], ax
movzx eax, byte [0x1400a91ce]
mov byte [rsp + 0x4e], al
xor r8d, r8d
lea r10d, [r8 + 1]
lea r11d, [r8 + 0x1f]
cmp r13d, 2
jl 0x14001f7d1
movdqa xmm4, xmmword [0x1400aab20]
movd xmm6, r10d
movd xmm5, r11d
movdqa xmm2, xmmword [0x1400aaa80]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400aaab0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400aab10]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444DYZ_TtpfsrseKoy58888888888888888]
movd xmm0, dword [str.FPC]
xorps xmm2, xmm0
movd dword [rsp + 0x40], xmm2
movdqa xmm3, xmmword [0x1400aaa90]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400aaab0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400aab10]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444DYZ_TtpfsrseKoy58888888888888888]
movd xmm0, dword [rsp + 0x44]
xorps xmm2, xmm0
movd dword [rsp + 0x44], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xf
jl 0x14001f7e0
movups xmm0, xmmword [str.ctdyqw]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [0x1400a9ec0]
movups xmmword [rbp - 0x10], xmm1
movups xmm0, xmmword [0x1400a9ed0]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [0x1400a9ee0]
movups xmmword [rbp + 0x10], xmm1
movsd xmm0, qword [str.rpk_t]
movsd qword [rbp + 0x20], xmm0
movzx eax, byte [0x1400a9ef8]
mov byte [rbp + 0x28], al
xor r8d, r8d
cmp r13d, 2
jl 0x14001f9a3
movdqa xmm5, xmmword [0x1400aaa80]
movdqa xmm4, xmmword [0x1400aab20]
movd xmm6, r10d
movdqa xmm7, xmmword [0x1400aaab0]
movd xmm8, r11d
movdqa xmm0, xmmword [str.4444444444444444DYZ_TtpfsrseKoy58888888888888888]
movdqa xmmword [rbp - 0x30], xmm0
lea rcx, [rbp - 0x1c]
mov edx, dword [rbp - 0x30]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400aab10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400aab10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x48
jl 0x14001f8a0
cmp r8d, 0x49
jge 0x14001f9df
movsxd rax, r8d
lea r9, [rbp - 0x20]
add r9, rax
nop dword [rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x49
jl 0x14001f9b0
mov r9d, 4
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x20]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x14001fb7b
call fcn.140015210
mov ecx, 0x33
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14001fad0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14001faa6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14001faa6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14001faa1
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x14001fa80
cmp r8d, 0xb3c99bd
je 0x14001faab
test r9d, r9d
jne 0x14001fa60
mov rax, qword [rax]
jmp 0x14001fa30
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov edx, 0x1f4
mov ecx, edx
call rax
call fcn.14001ccd0
mov ecx, 0x34
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14001f4f0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14001fb76
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14001fb76
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14001fb71
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14001fb50
cmp r8d, 0xb3c99bd
je 0x14001fb84
test r9d, r9d
jne 0x14001fb30
mov rax, qword [rax]
jmp 0x14001fb00
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, dword [rdi + 0x24]
add rdx, r10
movzx r8d, word [rdx + r9*2]
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdx + r8*4]
add rax, r10
mov edx, 0x1f4
mov ecx, edx
call rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140001e20
int3