Function at 0x140001000
Capabilities:
Authenticate hmac
Check for time delay via gettickcount
Check internet connectivity via wininet
Download url
Log keystrokes via polling
Parse pe header
Receive data
Resolve function by parsing pe exports

Disassembly:
sub rsp, 0x28
mov r8, 0xbf8
xor rdx, rdx
movabs rcx, 0x1400c3454
call sub.msvcrt.dll_memset
xor rcx, rcx
call sub.KERNEL32.dll_GetModuleHandleA
mov qword [0x1400c345c], rax
xor r8, r8
mov rdx, 0x1000
xor rcx, rcx
call sub.KERNEL32.dll_HeapCreate
mov qword [0x1400c3454], rax
movabs rax, 0x1400b0b89
mov qword [0x1400c346c], rax
call fcn.14001e2c0
call fcn.14001d610
call fcn.14001d428
call fcn.14001be10
call fcn.14001ae30
call fcn.14001aafc
call fcn.14001a94c
call fcn.1400199e0
call fcn.14001945c
call fcn.1400191a8
call fcn.140017058
call fcn.140015250
call fcn.140013524
call fcn.140012940
call fcn.140012684
call fcn.140010c88
call fcn.1400151a0
call fcn.140011470
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140019604
add rsp, 0x28
lea rcx, [0x1400c3474]
pop rdx
call fcn.14001e350
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c3474]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.0.ogg
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140019d40
add rsp, 0x28
pop qword [0x1400c4620]
movabs rbp, 0x140075396
mov r15, rbp
movabs rbp, 0x140072800
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x140072800
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001a040
push 0
pop rcx
call fcn.140019940
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c3474]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.1.ogg
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140019d40
add rsp, 0x28
pop qword [0x1400c4620]
movabs rbp, 0x140078307
mov r15, rbp
movabs rbp, 0x140075396
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x140075396
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001a040
push 0
pop rcx
call fcn.140019940
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c3474]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.3.ogg
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140019d40
add rsp, 0x28
pop qword [0x1400c4620]
movabs rbp, 0x14007b93c
mov r15, rbp
movabs rbp, 0x140078307
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x140078307
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001a040
push 0
pop rcx
call fcn.140019940
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c3474]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.4.ogg
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140019d40
add rsp, 0x28
pop qword [0x1400c4620]
movabs rbp, 0x14008030d
mov r15, rbp
movabs rbp, 0x14007b93c
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x14007b93c
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001a040
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c3474]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.5.ogg
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140019d40
add rsp, 0x28
pop qword [0x1400c4620]
movabs rbp, 0x140082f1a
mov r15, rbp
movabs rbp, 0x14008030d
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x14008030d
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001a040
push 0
pop rcx
call fcn.140019940
call fcn.140011538
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c3474]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.0.ogg
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117e8
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c347c], rax
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c3474]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.1.ogg
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 1
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117e8
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c347c], rax
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c3474]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.3.ogg
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 3
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117e8
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c347c], rax
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c3474]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.4.ogg
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 4
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117e8
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c347c], rax
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c3474]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.5.ogg
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 5
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400117e8
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c347c], rax
call fcn.1400151a0
mov rdx, qword [0x1400c4620]
push rdx
push rdx
push 0
push 0x40
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140012988
add rsp, 0x28
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000e26a
add rsp, 0x28
lea rcx, [0x1400c3484]
pop rdx
call fcn.14001e350
movabs rbp, 0x140082f1a
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
call fcn.14001b108
and rax, rax
je 0x14000284b
movabs rbp, 0x1400946d1
mov rax, rbp
push rax
push 2
pop rcx
pop rdx
call fcn.14001b108
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0x41
push 0x133
push 2
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14001abb4
call fcn.14001ac00
push 0x100
push 0x18
movabs rax, str.Arial
push rax
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.140019480
and rax, rax
je 0x140001765
push 0x100
push 0x30
movabs rax, str.Arial
push rax
push 2
pop rcx
pop rdx
pop r8
pop r9
call fcn.140019480
and rax, rax
je 0x14000178f
push 0x120
push 0xfa
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x1400018c9
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
movabs rax, str.zzcrow
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0xc8
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0xc8
push 0x12
push 0x133
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
mov rdx, 0x65
sub rsp, 8
movabs rax, 0x1400c3f8c
push rax
sub rsp, 0x20
movabs r9, 0x1400727f0
mov r8, 8
mov rcx, 8
call fcn.14001a7c8
add rsp, 0x30
mov qword [0x1400c3f8c], rax
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140019604
add rsp, 0x28
lea rcx, [0x1400c348c]
pop rdx
call fcn.14001e350
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c348c]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.Options
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0xa
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140019d40
add rsp, 0x28
pop qword [0x1400c4620]
and rax, rax
je 0x1400019e7
movabs rbp, 0x1400aeeb9
mov r15, rbp
movabs rbp, str.TRAINER_r_n_r_n_r_nNumpad_1:_Unlimited_Health_r_nNumpad_2:_Easy_Kills_r_nNumpad_3:_Unlimited_Ammo_r_nNumpad_4:_No_Reload_r_nNumpad_5:_Super_Accuracy_r_nNumpad_6:_No_Recoil_r_nNumpad_7:_Steady_Shot_r_nNumpad_8:_Zoom_In_r_nNumpad_9:_Zoom_Out_r_nNumpad__:_Super_Speed_r_nNumpad_:_Super_Jump
sub r15, rbp
mov rax, r15
push rax
movabs rbp, str.TRAINER_r_n_r_n_r_nNumpad_1:_Unlimited_Health_r_nNumpad_2:_Easy_Kills_r_nNumpad_3:_Unlimited_Ammo_r_nNumpad_4:_No_Reload_r_nNumpad_5:_Super_Accuracy_r_nNumpad_6:_No_Recoil_r_nNumpad_7:_Steady_Shot_r_nNumpad_8:_Zoom_In_r_nNumpad_9:_Zoom_Out_r_nNumpad__:_Super_Speed_r_nNumpad_:_Super_Jump
mov rax, rbp
push rax
push 0xa
pop rcx
pop rdx
pop r8
call fcn.14001a040
push 0xa
pop rcx
call fcn.140019940
jmp 0x140001a09
movabs rax, str.Could_not_install_the_file___Installtion_failed
push rax
movabs rax, str.Error
push rax
pop rcx
pop rdx
call fcn.140012718
jmp 0x14000cf0a
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c348c]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.help.txt
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140019d40
add rsp, 0x28
pop qword [0x1400c4620]
and rax, rax
je 0x140001abd
movabs rbp, 0x1400affc6
mov r15, rbp
movabs rbp, 0x1400aeeb9
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x1400aeeb9
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001a040
push 0
pop rcx
call fcn.140019940
jmp 0x140001ada
movabs rax, str.Could_not_create_HELP.TXT_file.
push rax
movabs rax, str.Error
push rax
pop rcx
pop rdx
call fcn.140012718
mov rdx, 0x65
sub rsp, 8
movabs rax, 0x1400c3f8c
push rax
sub rsp, 0x20
movabs r9, 0x1400727f0
mov r8, 8
mov rcx, 8
call fcn.14001a7c8
add rsp, 0x30
mov qword [0x1400c3f8c], rax
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c348c]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.Options
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0xa
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140019e60
add rsp, 0x28
pop qword [0x1400c4620]
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
push 0xa
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001a0d0
add rsp, 0x28
movabs rcx, 0x140072094
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
lea rcx, [0x1400c3494]
pop rdx
call fcn.14001e350
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
push 0xa
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001a0d0
add rsp, 0x28
lea rcx, [0x1400c349c]
pop rdx
call fcn.14001e350
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
push 0xa
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001a0d0
add rsp, 0x28
mov r15, qword [0x1400c34a4]
inc r15
mov rbp, qword [0x1400c3f8c]
shl r15, 3
lea rcx, [r15 + rbp]
pop rdx
call fcn.14001e350
inc qword [0x1400c34a4]
push 0xa
pop rcx
call fcn.14001a240
mov r15, rax
cmp r15, 1
jne 0x140001bf7
push 0xa
pop rcx
call fcn.140019940
fild qword [0x1400c34a4]
fmul dword [0x1400727b4]
fstp dword [0x1400c3c28]
fld dword [0x1400c3c28]
fmul dword [0x1400727b8]
fstp dword [0x1400c3c2c]
fld dword [0x1400c3c28]
fild qword [0x1400c34a4]
fdiv dword [0x1400727bc]
fdivp st(1)
fstp dword [0x1400c3c30]
fld dword [0x1400c3c2c]
fild qword [0x1400c34a4]
fdiv dword [0x1400727bc]
fdivp st(1)
fstp dword [0x1400c3c34]
fld dword [0x1400c3c28]
fcomp dword [0x1400727c0]
fnstsw ax
test ah, 1
jne 0x140001cd7
mov r15, qword [0x1400c34a4]
cmp r15, 0x15
jl 0x140001cd7
jmp 0x140001ce0
mov rax, 1
jmp 0x140001ce3
xor rax, rax
and rax, rax
je 0x140001d20
mov dword [0x1400c3c28], 0x44480000
mov dword [0x1400c3c2c], 0x44c80000
fld dword [0x1400c3c28]
fdiv dword [0x1400727b8]
fstp dword [0x1400c3c30]
fld dword [0x1400c3c2c]
fdiv dword [0x1400727b8]
fstp dword [0x1400c3c34]
push 0x120
fld dword [0x1400c3c2c]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
fld dword [0x1400c3c28]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x140001f6b
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
mov qword [0x1400c34ac], 1
mov rax, qword [0x1400c34a4]
cmp rax, qword [0x1400c34ac]
jl 0x140001e19
push 0xff
push 0
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3f8c]
shl r15, 3
push qword [r15 + rbp]
mov r15, qword [0x1400c34ac]
imul r15, r15, 0x1a
add r15, 0xffffffffffffffe8
mov rax, r15
push rax
push 2
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
inc qword [0x1400c34ac]
jno 0x140001da4
mov qword [0x1400c34ac], 1
mov rax, qword [0x1400c34a4]
cmp rax, qword [0x1400c34ac]
jl 0x140001e99
push 0xff
push 0xff
push 0xff
push 0xff
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3f8c]
shl r15, 3
push qword [r15 + rbp]
mov r15, qword [0x1400c34ac]
imul r15, r15, 0x1a
add r15, 0xffffffffffffffe6
mov rax, r15
push rax
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
inc qword [0x1400c34ac]
jno 0x140001e24
call fcn.14001ac00
push 0
fld dword [0x1400c3c34]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
fld dword [0x1400c3c30]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
fld dword [0x1400c3c34]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
fld dword [0x1400c3c30]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
push 0x43
push 7
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0x120
push 0x190
push 0x640
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x1400020fb
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 2
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push qword [0x1400c4620]
sub rsp, 8
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x20
mov rax, rax
push rax
mov rcx, qword [0x1400c3494]
push qword [0x1400c4620]
sub rsp, 0x20
call fcn.14001e410
add rsp, 0x20
mov rcx, qword [0x1400c349c]
sub rsp, 0x20
call fcn.14001e410
add rsp, 0x20
inc qword [0x1400c4620]
push 0
push 0
mov rdx, qword [0x1400c4630]
add qword [rsp + 0x10], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ac84
add rsp, 0x28
pop qword [0x1400c4620]
call fcn.14001ac00
push 0
push 0x64
push 0x190
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0x190
push 0x28
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
sub rsp, 8
movabs rax, 0x90000001
push rax
movabs rax, 0x14007202a
push rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b6d0
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b6f4
add rsp, 0x20
mov rax, rax
push rax
push 0
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400174cc
add rsp, 0x40
and rax, rax
je 0x14000284b
movabs rax, str.CLOSEBUTTON
push rax
push 0x13
push 0x13
push 6
push 0x1e4
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015488
add rsp, 0x30
mov qword [0x1400c347c], rax
movabs rax, str.READMEBUTTON
push rax
push 0x20
push 0x11e
push 0x17e
push 0xa
push 3
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015488
add rsp, 0x30
mov qword [0x1400c347c], rax
movabs rax, str.TROUBLEBUTTON
push rax
push 0x20
push 0x11e
push 0x19c
push 0xa
push 4
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015488
add rsp, 0x30
mov qword [0x1400c347c], rax
movabs rax, str.CHBUTTON
push rax
push 0x23
push 0xf5
push 1
push 0x23
push 5
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015488
add rsp, 0x30
mov qword [0x1400c347c], rax
movabs rax, str.BOXARTBUTTON
push rax
push 0x118
push 0xc8
push 0x2d
push 0x132
push 6
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015488
add rsp, 0x30
mov qword [0x1400c347c], rax
movabs rax, 0x1400721ea
push rax
push 0x10e
push 0x122
push 0x41
push 0
push 7
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140015488
add rsp, 0x30
mov qword [0x1400c347c], rax
push 0
pop rcx
call fcn.140017530
mov rax, rax
push rax
movabs rax, 0x80000000
push rax
movabs rax, str.Test
push rax
push 0x6b
push 0xc8
push 0
push 0xfffffffffffffc18
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400170d8
add rsp, 0x40
push 0
pop rcx
call fcn.140017530
mov rax, rax
push rax
pop rcx
call fcn.14000ec15
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
push 0
push 0
pop rcx
pop rdx
call fcn.140017608
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
movabs rcx, str.http:__www.cheathappens.com_trnflash.asp_id
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
mov rcx, qword [0x1400c3484]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0xc8
push 0x12c
push 0
push 0
push 2
mov rdx, qword [0x1400c4630]
add qword [rsp + 0x28], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140016a08
add rsp, 0x38
pop qword [0x1400c4620]
mov qword [0x1400c347c], rax
push 0
push 0
pop rcx
pop rdx
call sub.WININET.DLL_InternetGetConnectedState
mov r15, rax
and r15, r15
jne 0x14000244b
push 1
push 1
pop rcx
pop rdx
call fcn.140017608
mov qword [0x1400c34ac], 1
mov rax, 4
cmp rax, qword [0x1400c34ac]
jl 0x14000284b
push 0x120
push 0xfa
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x140002649
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
movabs rax, str.zzcrow
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0xc8
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x44
push 0x44
push 0x44
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0xe
push 0xaf
push 0x12
push 0x133
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
push 0x21
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0xc8
push 0x12
push 0x133
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
push 0x32
pop rcx
call fcn.140013018
push 0x120
push 0xfa
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x140002833
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xff
push 0xff
push 0xff
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
movabs rax, str.zzcrow
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0xc8
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x44
push 0x44
push 0x44
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0xe
push 0xaf
push 0x12
push 0x133
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
push 0x21
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0xc8
push 0x12
push 0x133
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
push 0x32
pop rcx
call fcn.140013018
inc qword [0x1400c34ac]
jno 0x140002456
mov rdx, 0x100
sub rsp, 8
movabs rax, 0x1400c3f9c
push rax
sub rsp, 0x20
movabs r9, 0x1400727f0
mov r8, 8
mov rcx, 8
call fcn.14001a7c8
add rsp, 0x30
mov qword [0x1400c3f9c], rax
movabs rax, 0x1400affc6
mov qword [0x1400c346c], rax
lea rcx, [0x1400c34b4]
mov rdx, qword [0x1400c346c]
call fcn.14001e480
add qword [0x1400c346c], rax
mov qword [0x1400c34ac], 1
mov rax, 0xfe
cmp rax, qword [0x1400c34ac]
jl 0x140002984
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
movabs rax, 0x14007203e
push rax
push qword [0x1400c34ac]
push qword [0x1400c34b4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14000f100
add rsp, 0x28
lea rcx, [0x1400c34bc]
pop rdx
call fcn.14001e350
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400c34bc]
pop rcx
sub rsp, 0x20
call fcn.14000f260
add rsp, 0x28
dec rax
push rax
push qword [0x1400c34bc]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000f290
add rsp, 0x28
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3f9c]
shl r15, 3
lea rcx, [r15 + rbp]
pop rdx
call fcn.14001e350
inc qword [0x1400c34ac]
jno 0x1400028c3
call sub.KERNEL32.dll_IsDebuggerPresent
and rax, rax
je 0x140002996
push 0x75009553
inc ecx
ret
push 0x12c
pop rcx
call fcn.140013018
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x140002b80
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
movabs rax, str.Authenticating_Trainer......
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
mov rdx, qword [0x1400c4620]
push rdx
push rdx
pop rcx
sub rsp, 0x20
call fcn.140012988
add rsp, 0x20
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001969c
add rsp, 0x28
lea rcx, [0x1400c34c4]
pop rdx
call fcn.14001e350
mov rcx, qword [0x1400c34c4]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
lea rcx, [0x1400c34cc]
pop rdx
call fcn.14001e350
call sub.USER32.DLL_GetForegroundWindow
mov qword [0x1400c34d4], rax
lea rax, [0x1400c34dc]
mov rax, rax
push rax
push qword [0x1400c34d4]
pop rcx
pop rdx
call sub.USER32.DLL_GetWindowThreadProcessId
push qword [0x1400c34dc]
push qword [0x1400c34ec]
push 0x1f0fff
pop rcx
pop rdx
pop r8
call sub.KERNEL32.dll_OpenProcess
mov qword [0x1400c34e4], rax
mov rax, qword [0x1400c34dc]
mov qword [0x1400c34d4], rax
push 0x3e8
pop rcx
call fcn.14001d640
mov qword [0x1400c34f4], rax
mov rcx, qword [0x1400c34cc]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
lea rcx, [0x1400c34fc]
pop rdx
call fcn.14001e350
mov rax, qword [0x1400c350c]
mov qword [0x1400c3504], rax
movabs rbp, 0x1400b0b89
mov qword [0x1400c34ac], rbp
push qword [0x1400c34ac]
pop rcx
call fcn.14001d660
mov rax, rax
mov byte [0x1400c3c48], al
movabs rbp, 0x1400b0b8c
mov qword [0x1400c34ac], rbp
movabs rbp, 0x1400b0b8c
mov r15, rbp
add r15, 0xbb8
cmp r15, qword [0x1400c34ac]
jl 0x140002d5c
push qword [0x1400c34ac]
pop rcx
call fcn.14001d660
mov rax, rax
mov byte [0x1400c3c49], al
movsx r15, byte [0x1400c3c49]
movsx rax, byte [0x1400c3c48]
xor r15, rax
mov rax, r15
mov byte [0x1400c3c4a], al
movsx r15, byte [0x1400c3c48]
add r15, 0x37
mov rax, r15
mov byte [0x1400c3c48], al
movsx r15, byte [0x1400c3c48]
cmp r15, 0xff
jle 0x140002d4f
movsx r15, byte [0x1400c3c48]
add r15, 0xffffffffffffff01
mov rax, r15
mov byte [0x1400c3c48], al
inc qword [0x1400c34ac]
jno 0x140002cc3
call sub.KERNEL32.dll_GetTickCount
mov qword [0x1400c3514], rax
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140012988
add rsp, 0x28
lea rcx, [0x1400c351c]
pop rdx
call fcn.14001e350
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
push qword [0x1400c351c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001969c
add rsp, 0x28
lea rcx, [0x1400c351c]
pop rdx
call fcn.14001e350
movabs rdx, 0x14007202a
lea rcx, [0x1400c34b4]
call fcn.14001e480
movabs rdx, 0x14007202a
lea rcx, [0x1400c3524]
call fcn.14001e480
movabs rdx, 0x14007202a
lea rcx, [0x1400c352c]
call fcn.14001e480
mov qword [0x1400c3534], 0
mov dword [0x1400c3c38], 0
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400c4620]
pop rcx
sub rsp, 0x20
call fcn.140012988
add rsp, 0x28
inc qword [0x1400c4620]
push 0
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140019f50
add rsp, 0x28
pop qword [0x1400c4620]
push 0
pop rcx
call fcn.14001a310
mov qword [0x1400c353c], rax
mov qword [0x1400c34ac], 1
mov r15, qword [0x1400c353c]
add r15, 0xfffffffffffffff8
cmp r15, qword [0x1400c34ac]
jl 0x140002ed1
push 0
pop rcx
call fcn.14001a370
mov rax, rax
mov byte [0x1400c3c4b], al
movsxd r15, dword [0x1400c3c38]
movzx rax, byte [0x1400c3c4b]
add r15, rax
mov rax, r15
mov dword [0x1400c3c38], eax
inc qword [0x1400c34ac]
jno 0x140002e85
push 0
pop rcx
call fcn.14001a3e0
mov qword [0x1400c3544], rax
push 0
pop rcx
call fcn.14001a3e0
mov qword [0x1400c354c], rax
push 0
pop rcx
call fcn.140019940
movsxd rax, dword [0x1400c3c38]
push rax
pop qword [0x1400c3554]
push qword [0x1400c351c]
push 0
pop rcx
pop rdx
call fcn.140019f50
mov r15, rax
and r15, r15
jle 0x1400033d6
mov qword [0x1400c34ac], 1
mov rax, 0x3b8
cmp rax, qword [0x1400c34ac]
jl 0x140002f62
push 0
pop rcx
call fcn.14001a450
mov qword [0x1400c355c], rax
inc qword [0x1400c34ac]
jno 0x140002f37
mov qword [0x1400c34ac], 0x3b9
mov rax, 0x3c0
cmp rax, qword [0x1400c34ac]
jl 0x14000303f
push 0
pop rcx
call fcn.14001a450
mov qword [0x1400c355c], rax
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400c4620]
push 1
push qword [0x1400c355c]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000f3b0
add rsp, 0x28
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000f570
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c355c], rax
mov rcx, qword [0x1400c34b4]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
mov rdx, qword [0x1400c4620]
push rdx
push rdx
push qword [0x1400c355c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f660
add rsp, 0x20
pop rax
lea rcx, [0x1400c34b4]
pop rdx
call fcn.14001e350
inc qword [0x1400c34ac]
jno 0x140002f6d
push qword [0x1400c34b4]
pop rcx
call fcn.14000eaf7
mov qword [0x1400c355c], rax
mov r15, qword [0x1400c355c]
movabs rax, 0x98989898
xor r15, rax
mov qword [0x1400c355c], r15
mov rax, qword [0x1400c355c]
mov qword [0x1400c3564], rax
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
push 0xa
push qword [0x1400c4620]
movabs rcx, str.0000000000
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
mov rdx, qword [0x1400c4620]
push rdx
push rdx
push qword [0x1400c355c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f790
add rsp, 0x20
pop rax
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000f7f0
add rsp, 0x28
lea rcx, [0x1400c34b4]
pop rdx
call fcn.14001e350
mov qword [0x1400c34ac], 0x3c1
mov rax, 0x3c8
cmp rax, qword [0x1400c34ac]
jl 0x1400031cf
push 0
pop rcx
call fcn.14001a450
mov qword [0x1400c355c], rax
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400c4620]
push 1
push qword [0x1400c355c]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000f3b0
add rsp, 0x28
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000f570
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c355c], rax
mov rcx, qword [0x1400c3524]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
mov rdx, qword [0x1400c4620]
push rdx
push rdx
push qword [0x1400c355c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f660
add rsp, 0x20
pop rax
lea rcx, [0x1400c3524]
pop rdx
call fcn.14001e350
inc qword [0x1400c34ac]
jno 0x1400030fd
push qword [0x1400c3524]
pop rcx
call fcn.14000eaf7
mov qword [0x1400c356c], rax
mov qword [0x1400c34ac], 0x3c9
mov rax, 0x3d0
cmp rax, qword [0x1400c34ac]
jl 0x1400032bf
push 0
pop rcx
call fcn.14001a450
mov qword [0x1400c355c], rax
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400c4620]
push 1
push qword [0x1400c355c]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000f3b0
add rsp, 0x28
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000f570
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c355c], rax
mov rcx, qword [0x1400c352c]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
mov rdx, qword [0x1400c4620]
push rdx
push rdx
push qword [0x1400c355c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f660
add rsp, 0x20
pop rax
lea rcx, [0x1400c352c]
pop rdx
call fcn.14001e350
inc qword [0x1400c34ac]
jno 0x1400031ed
push qword [0x1400c352c]
pop rcx
call fcn.14000eaf7
mov qword [0x1400c355c], rax
mov rax, qword [0x1400c355c]
mov qword [0x1400c3574], rax
mov qword [0x1400c34ac], 0x3d1
mov rax, qword [0x1400c3574]
cmp rax, qword [0x1400c34ac]
jl 0x140003316
push 0
pop rcx
call fcn.14001a450
mov qword [0x1400c355c], rax
inc qword [0x1400c34ac]
jno 0x1400032eb
mov rax, qword [0x1400c3574]
mov qword [0x1400c34ac], rax
mov r15, qword [0x1400c3574]
add r15, 0x12
cmp r15, qword [0x1400c34ac]
jl 0x140003368
push 0
pop rcx
call fcn.14001a450
mov qword [0x1400c355c], rax
mov r15, qword [0x1400c3534]
add r15, qword [0x1400c355c]
mov qword [0x1400c3534], r15
inc qword [0x1400c34ac]
jno 0x140003324
mov r15, qword [0x1400c356c]
xor r15, qword [0x1400c3534]
mov qword [0x1400c357c], r15
mov r15, qword [0x1400c357c]
and r15, r15
jne 0x140003394
mov qword [0x1400c357c], 0x63
mov r15, qword [0x1400c357c]
movabs rax, 0x98989898
xor r15, rax
mov qword [0x1400c357c], r15
mov rax, qword [0x1400c3564]
mov qword [0x1400c3584], rax
mov r15, qword [0x1400c3564]
cmp r15, qword [0x1400c357c]
jne 0x1400033cf
jmp 0x1400033d4
call fcn.14000b5cc
jmp 0x1400033db
call fcn.14000b5cc
mov r15, qword [0x1400c354c]
cmp r15, qword [0x1400c353c]
jne 0x1400033ed
jmp 0x1400033f2
call fcn.14000b5cc
call sub.KERNEL32.dll_GetTickCount
mov qword [0x1400c358c], rax
mov r15, qword [0x1400c358c]
sub r15, qword [0x1400c3514]
cmp r15, 0x3e8
jle 0x14000341d
push 0x9099542
inc eax
ret
mov qword [0x1400c3594], 0x45a2a5
mov rdx, 0x15
sub rsp, 8
movabs rax, 0x1400c3fac
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001a7c8
add rsp, 0x30
mov qword [0x1400c3fac], rax
mov rdx, 0x15
sub rsp, 8
movabs rax, 0x1400c3fbc
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001a7c8
add rsp, 0x30
mov qword [0x1400c3fbc], rax
mov rdx, 0x15
sub rsp, 8
movabs rax, 0x1400c3fcc
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001a7c8
add rsp, 0x30
mov qword [0x1400c3fcc], rax
mov rdx, 0x15
sub rsp, 8
movabs rax, 0x1400c3fdc
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001a7c8
add rsp, 0x30
mov qword [0x1400c3fdc], rax
mov rdx, 0x15
sub rsp, 8
movabs rax, 0x1400c3fec
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001a7c8
add rsp, 0x30
mov qword [0x1400c3fec], rax
mov rdx, 0x15
sub rsp, 8
movabs rax, 0x1400c3ffc
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001a7c8
add rsp, 0x30
mov qword [0x1400c3ffc], rax
mov rdx, 0xa
sub rsp, 8
movabs rax, 0x1400c400c
push rax
sub rsp, 0x20
xor r9, r9
mov r8, 0x15
mov rcx, 8
call fcn.14001a7c8
add rsp, 0x30
mov qword [0x1400c400c], rax
push 0x3e8
pop rcx
call fcn.14001d640
mov qword [0x1400c34f4], rax
push 0x3e8
pop rcx
call fcn.14001d640
mov qword [0x1400c359c], rax
mov qword [0x1400c34ac], 1
mov rax, 0x14
cmp rax, qword [0x1400c34ac]
jl 0x14000365b
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov qword [r15 + rbp], 1
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov qword [r15 + rbp], 1
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov qword [r15 + rbp], 1
inc qword [0x1400c34ac]
jno 0x1400035f4
mov rbp, qword [0x1400c400c]
mov qword [rbp], 0xcc
mov qword [rbp + 8], 0xffffff
mov qword [rbp + 0x10], 0xcc0000
mov qword [rbp + 0x18], 0xaa00
mov qword [rbp + 0x20], 0x55ee
mov qword [rbp + 0x28], 0xccff
mov qword [rbp + 0x30], 0x2255
mov qword [rbp + 0x38], 0x770044
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], 0x6633ff
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400c4620]
push 1
push 1
mov rdx, qword [0x1400c4620]
push rdx
push rdx
push qword [0x1400c357c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f790
add rsp, 0x20
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14000f890
add rsp, 0x28
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000f570
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c35a4], rax
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400c4620]
push 1
push 2
mov rdx, qword [0x1400c4620]
push rdx
push rdx
push qword [0x1400c357c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f790
add rsp, 0x20
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14000f890
add rsp, 0x28
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000f570
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c35ac], rax
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400c4620]
push 1
push 3
mov rdx, qword [0x1400c4620]
push rdx
push rdx
push qword [0x1400c357c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f790
add rsp, 0x20
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14000f890
add rsp, 0x28
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000f570
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c35b4], rax
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400c4620]
push 1
push 4
mov rdx, qword [0x1400c4620]
push rdx
push rdx
push qword [0x1400c357c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f790
add rsp, 0x20
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14000f890
add rsp, 0x28
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000f570
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c35bc], rax
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400c4620]
push 1
push 5
mov rdx, qword [0x1400c4620]
push rdx
push rdx
push qword [0x1400c357c]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f790
add rsp, 0x20
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14000f890
add rsp, 0x28
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000f570
add rsp, 0x28
pop qword [0x1400c4620]
mov qword [0x1400c35c4], rax
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
mov r15, qword [0x1400c35a4]
shl r15, 3
push qword [r15 + rbp]
push 2
push 2
push 0x144
push 0x1ea
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
sub rsp, 8
mov r15, qword [0x1400c35ac]
shl r15, 3
push qword [r15 + rbp]
push 2
push 2
push 0x144
push 0x1ed
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
sub rsp, 8
mov r15, qword [0x1400c35b4]
shl r15, 3
push qword [r15 + rbp]
push 2
push 2
push 0x144
push 0x1f0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
sub rsp, 8
mov r15, qword [0x1400c35bc]
shl r15, 3
push qword [r15 + rbp]
push 2
push 2
push 0x144
push 0x1f3
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
sub rsp, 8
mov r15, qword [0x1400c35c4]
shl r15, 3
push qword [r15 + rbp]
push 2
push 2
push 0x144
push 0x1f6
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
call fcn.14001ac00
movabs rdx, str.Template
lea rcx, [0x1400c35fc]
call fcn.14001e480
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140019604
add rsp, 0x28
lea rcx, [0x1400c35cc]
pop rdx
call fcn.14001e350
call fcn.14000a33e
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c35cc]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.CH.dll
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140019d40
add rsp, 0x28
pop qword [0x1400c4620]
and rax, rax
je 0x140003b7f
movabs rbp, 0x1400b278c
mov r15, rbp
movabs rbp, 0x1400b0b8c
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x1400b0b8c
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001a040
push 0
pop rcx
call fcn.140019940
jmp 0x140003b7f
push qword [0x1400c4620]
sub rsp, 8
mov rcx, qword [0x1400c35cc]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
movabs rcx, str.help.txt
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
inc qword [0x1400c4620]
push 0
mov rdx, qword [0x1400c4630]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140019d40
add rsp, 0x28
pop qword [0x1400c4620]
and rax, rax
je 0x140003c33
movabs rbp, 0x1400affc6
mov r15, rbp
movabs rbp, 0x1400aeeb9
sub r15, rbp
mov rax, r15
push rax
movabs rbp, 0x1400aeeb9
mov rax, rbp
push rax
push 0
pop rcx
pop rdx
pop r8
call fcn.14001a040
push 0
pop rcx
call fcn.140019940
jmp 0x140003c50
movabs rax, str.Could_not_create_HELP.TXT_file.
push rax
movabs rax, str.Error
push rax
pop rcx
pop rdx
call fcn.140012718
movabs rax, str.CH_Trainer_Keys.dat
push rax
push 0
pop rcx
pop rdx
call fcn.140019f50
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c347c]
and r15, r15
jle 0x140003c90
mov qword [0x1400c362c], 1
push 0
pop rcx
call fcn.140019940
push 0
push 0
pop rcx
pop rdx
call sub.WININET.DLL_InternetGetConnectedState
and rax, rax
je 0x140003ca8
jmp 0x140003cef
mov rax, qword [0x1400c3584]
mov rax, rax
push rax
pop rcx
call fcn.14000d45a
mov r15, rax
and r15, r15
jne 0x140003cef
push 0
movabs rax, str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push rax
movabs rax, str.No_Internet_Connection_
push rax
pop rcx
pop rdx
pop r8
call fcn.1400126c0
jmp 0x14000cf0a
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.140019604
add rsp, 0x28
movabs rcx, str.black.txt
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
lea rcx, [0x1400c3634]
pop rdx
call fcn.14001e350
mov r15, qword [0x1400c363c]
and r15, r15
jle 0x140003e51
push qword [0x1400c4620]
movabs rcx, str.http:__www.cheathappens.com_unauthorized_
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
mov rdx, qword [0x1400c4620]
push rdx
push rdx
mov r15, qword [0x1400c3584]
xor r15, 0x7b3d89b
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f790
add rsp, 0x20
pop rax
movabs rcx, str..zip
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
lea rcx, [0x1400c3644]
pop rdx
call fcn.14001e350
movabs rdx, str.http:__www.cheathappens.com_unauthorized_0.zip
lea rcx, [0x1400c364c]
call fcn.14001e480
mov rcx, qword [0x1400c3644]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
lea rcx, [0x1400c3654]
pop rdx
call fcn.14001e350
mov rcx, qword [0x1400c364c]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
lea rcx, [0x1400c365c]
pop rdx
call fcn.14001e350
sub rsp, 8
push 0
push 0
mov rax, qword [0x1400c3634]
mov rax, rax
push rax
mov rax, qword [0x1400c365c]
mov rax, rax
push rax
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.URLMON.DLL_URLDownloadToFileA
add rsp, 0x30
mov qword [0x1400c3664], rax
push qword [0x1400c4620]
movabs rcx, str.http:__www.cheathappens.com_unauthorized_
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
mov rdx, qword [0x1400c4620]
push rdx
push rdx
mov r15, qword [0x1400c3584]
xor r15, 0x7b3d89b
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000f790
add rsp, 0x20
pop rax
movabs rcx, str..zip
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
lea rcx, [0x1400c3644]
pop rdx
call fcn.14001e350
movabs rdx, str.http:__www.cheathappens.com_unauthorized_0.zip
lea rcx, [0x1400c364c]
call fcn.14001e480
mov rcx, qword [0x1400c3644]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
lea rcx, [0x1400c3654]
pop rdx
call fcn.14001e350
mov rcx, qword [0x1400c364c]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
lea rcx, [0x1400c365c]
pop rdx
call fcn.14001e350
sub rsp, 8
push 0
push 0
mov rax, qword [0x1400c3634]
mov rax, rax
push rax
mov rax, qword [0x1400c365c]
mov rax, rax
push rax
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.URLMON.DLL_URLDownloadToFileA
add rsp, 0x30
mov qword [0x1400c3664], rax
mov r15, qword [0x1400c3664]
and r15, r15
jne 0x140003f72
jmp 0x140003fb9
mov rax, qword [0x1400c3584]
mov rax, rax
push rax
pop rcx
call fcn.14000d45a
mov r15, rax
and r15, r15
jne 0x140003fb9
push 0
movabs rax, str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push rax
movabs rax, str.No_Internet_Connection_
push rax
pop rcx
pop rdx
pop r8
call fcn.1400126c0
jmp 0x14000cf0a
sub rsp, 8
push 0
push 0
mov rax, qword [0x1400c3634]
mov rax, rax
push rax
mov rax, qword [0x1400c3654]
mov rax, rax
push rax
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.URLMON.DLL_URLDownloadToFileA
add rsp, 0x30
mov qword [0x1400c366c], rax
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
movabs rax, 0x1400720a7
push rax
movabs rax, str.IZnvZalZidZ_ZTraiZnerZ_UsZerZ
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000fc20
add rsp, 0x28
lea rcx, [0x1400c3674]
pop rdx
call fcn.14001e350
mov r15, qword [0x1400c366c]
and r15, r15
jne 0x14000404e
call fcn.14000b5cc
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
movabs rax, str.ZTSA
push rax
push qword [0x1400c3674]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000fc20
add rsp, 0x28
lea rcx, [0x1400c3674]
pop rdx
call fcn.14001e350
mov r15, qword [0x1400c366c]
and r15, r15
jne 0x14000427e
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x140004274
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xff
push 0xff
push 0xff
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
push qword [0x1400c3674]
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x28
push 0x28
push 0xff
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0x24
push 0x1df
push 1
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0x1f4
push 0xa
push 0xc8
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
call fcn.14000a33e
jmp 0x14000408a
mov r15, qword [0x1400c3664]
and r15, r15
je 0x1400042ac
mov rax, qword [0x1400c3584]
mov rax, rax
push rax
pop rcx
call fcn.14000d45a
mov r15, rax
and r15, r15
jne 0x1400042ac
mov rax, 1
jmp 0x1400042af
xor rax, rax
and rax, rax
je 0x1400042bf
mov qword [0x1400c3594], 0
mov qword [0x1400c367c], 3
lea rbp, [0x1400c3c54]
lea rax, [rbp]
mov rax, rax
push rax
pop rcx
call sub.USER32.DLL_GetKeyboardState
movsx rax, byte [rbp + 0x90]
push rax
pop qword [0x1400c3684]
mov r15, qword [0x1400c3684]
cmp r15, 1
jne 0x140004313
movabs rdx, str.Run_game_and_press_F1_at_main_menu.__Numlock_is_ON.
lea rcx, [0x1400c368c]
call fcn.14001e480
jmp 0x140004329
movabs rdx, str.Run_game_and_press_F1_at_main_menu.__Numlock_is_OFF.
lea rcx, [0x1400c368c]
call fcn.14001e480
mov r15, qword [0x1400c367c]
cmp r15, qword [0x1400c3684]
je 0x140004525
mov rax, qword [0x1400c3684]
mov qword [0x1400c367c], rax
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x140004525
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
push qword [0x1400c368c]
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
call fcn.14000a33e
push 0xa
pop rcx
call fcn.140013018
push 0x70
pop rcx
call sub.USER32.DLL_GetAsyncKeyState
mov r15, rax
and r15, 0x8000
and r15, r15
je 0x1400042ca
movabs rdx, 0x14007220f
lea rcx, [0x1400c34cc]
call fcn.14001e480
call fcn.140009125
mov r15, qword [0x1400c34d4]
and r15, r15
jne 0x14000478e
push 4
pop rcx
call fcn.140011b80
push 0x12c
pop rcx
call fcn.140013018
push 0x12c
pop rcx
call fcn.140013018
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x14000477e
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
movabs rax, str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
push 0x7d0
pop rcx
call fcn.140013018
jmp 0x14000427e
movabs rdx, str.CH.dll
lea rcx, [0x1400c3694]
call fcn.14001e480
mov rcx, qword [0x1400c35cc]
push qword [0x1400c4620]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
mov rcx, qword [0x1400c3694]
sub rsp, 0x28
call fcn.14001e410
add rsp, 0x28
lea rcx, [0x1400c34fc]
pop rdx
call fcn.14001e350
call fcn.14000917e
movabs rdx, str.xlive.dll
lea rcx, [0x1400c369c]
call fcn.14001e480
call fcn.140009125
call fcn.14000a1be
call fcn.14000a33e
mov r15, qword [0x1400c3614]
and r15, r15
jne 0x140004a0d
mov r15, qword [0x1400c36a4]
and r15, r15
jne 0x140004a0d
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x140004a08
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
movabs rax, str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
jmp 0x14000427e
mov r15, qword [0x1400c3544]
cmp r15, qword [0x1400c3554]
jne 0x140004a37
mov r15, qword [0x1400c3544]
and r15, r15
je 0x140004a37
mov r15, qword [0x1400c3554]
and r15, r15
je 0x140004a37
jmp 0x140004a40
mov rax, 1
jmp 0x140004a43
xor rax, rax
and rax, rax
je 0x140004aa9
push 0xa
pop rcx
call fcn.1400130e0
mov r15, rax
add r15, 0xa
mov qword [0x1400c36ac], r15
push 0x28
pop rcx
call fcn.1400130e0
mov r15, rax
add r15, 0x28
mov qword [0x1400c36b4], r15
mov r15, qword [0x1400c3614]
add r15, qword [0x1400c36ac]
mov qword [0x1400c3614], r15
mov r15, qword [0x1400c36a4]
add r15, qword [0x1400c36b4]
mov qword [0x1400c36a4], r15
call fcn.14000b5cc
push 3
pop rcx
call fcn.140011b80
push 0x12c
pop rcx
call fcn.140013018
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b380
and rax, rax
je 0x140004c9e
push 1
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 1
pop rcx
call fcn.1400195e4
mov rax, rax
push rax
pop rcx
call fcn.14001ac60
push 0x11
pop rcx
call fcn.14001ac74
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.140012ffc
mov rax, rax
push rax
movabs rax, str.Game_found__Trainer_Activated_
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001ac84
call fcn.14001ac00
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001b4e8
push 0
pop rcx
call fcn.14001b1cc
mov rax, rax
push rax
pop rcx
call fcn.14001ab48
push 0
pop rcx
call fcn.14001ac74
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140012ffc
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad3c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001ac74
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001ad04
add rsp, 0x30
call fcn.14001ac00
push 1
pop rcx
call fcn.14001adb0
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001b360
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140017530
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cf67
mov r15, qword [0x1400c36bc]
and r15, r15
je 0x1400050a5
push 0x8b
mov r15, qword [0x1400c34f4]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xff
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x55
mov r15, qword [0x1400c34f4]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x8b
mov r15, qword [0x1400c34f4]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xec
mov r15, qword [0x1400c34f4]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x83
mov r15, qword [0x1400c34f4]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xec
mov r15, qword [0x1400c34f4]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x20
mov r15, qword [0x1400c34f4]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x53
mov r15, qword [0x1400c34f4]
add r15, 8
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x56
mov r15, qword [0x1400c34f4]
add r15, 9
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x57
mov r15, qword [0x1400c34f4]
add r15, 0xa
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x8d
mov r15, qword [0x1400c34f4]
add r15, 0xb
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x45
mov r15, qword [0x1400c34f4]
add r15, 0xc
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xe0
mov r15, qword [0x1400c34f4]
add r15, 0xd
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x33
mov r15, qword [0x1400c34f4]
add r15, 0xe
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xf6
mov r15, qword [0x1400c34f4]
add r15, 0xf
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x50
mov r15, qword [0x1400c34f4]
add r15, 0x10
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xff
mov r15, qword [0x1400c34f4]
add r15, 0x11
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x75
mov r15, qword [0x1400c34f4]
add r15, 0x12
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xc
mov r15, qword [0x1400c34f4]
add r15, 0x13
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c36bc]
add r15, 0x1000
mov qword [0x1400c34ac], r15
mov r15, qword [0x1400c36bc]
add r15, 0x200000
cmp r15, qword [0x1400c34ac]
jl 0x1400050a5
sub rsp, 8
push qword [0x1400c34ec]
push 0x14
push qword [0x1400c359c]
push qword [0x1400c34ac]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_ReadProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push 0x14
push qword [0x1400c359c]
push qword [0x1400c34f4]
pop rcx
pop rdx
pop r8
call fcn.14001d680
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c347c]
cmp r15, 1
jne 0x140005098
mov rax, qword [0x1400c34ac]
mov qword [0x1400c36cc], rax
push 0xc2
mov r15, qword [0x1400c34f4]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xc
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 3
push qword [0x1400c34f4]
push qword [0x1400c36cc]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
inc qword [0x1400c34ac]
jno 0x140004f66
mov r15, qword [0x1400c363c]
and r15, r15
jle 0x1400050b6
jmp 0x140007066
mov r15, qword [0x1400c3594]
cmp r15, 0x45a2a5
jne 0x1400051d0
mov rbp, qword [0x1400c3fac]
mov qword [rbp + 8], 0x61
mov qword [rbp + 0x10], 0x62
mov qword [rbp + 0x18], 0x63
mov qword [rbp + 0x20], 0x64
mov qword [rbp + 0x28], 0x65
mov qword [rbp + 0x30], 0x66
mov qword [rbp + 0x38], 0x67
mov qword [rbp + 0x40], 0x68
mov qword [rbp + 0x48], 0x69
mov qword [rbp + 0x50], 0x6f
mov qword [rbp + 0x58], 0x6a
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0xa0], 0
mov qword [0x1400c34ac], 1
mov rax, 0x14
cmp rax, qword [0x1400c34ac]
jl 0x1400051d0
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3fac]
shl r15, 3
push qword [r15 + rbp]
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3fec]
shl r15, 3
pop qword [r15 + rbp]
inc qword [0x1400c34ac]
jno 0x14000518b
movabs rax, str.CH_Trainer_Keys.dat
push rax
push 0
pop rcx
pop rdx
call fcn.140019f50
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c347c]
and r15, r15
jle 0x1400053b2
mov qword [0x1400c362c], 1
push 0
pop rcx
call fcn.14001a450
mov qword [0x1400c36d4], rax
mov qword [0x1400c34ac], 1
mov rax, qword [0x1400c36d4]
cmp rax, qword [0x1400c34ac]
jl 0x1400053a7
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
push 0
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001a0d0
add rsp, 0x28
lea rcx, [0x1400c36dc]
pop rdx
call fcn.14001e350
push qword [0x1400c36dc]
movabs rcx, 0x1400721e4
pop rdx
call fcn.14001e570
or rax, rax
je 0x14000529d
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov qword [r15 + rbp], 0
push qword [0x1400c36dc]
movabs rcx, str.CTRL
pop rdx
call fcn.14001e570
or rax, rax
je 0x1400052d2
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov qword [r15 + rbp], 0
push qword [0x1400c36dc]
movabs rcx, 0x140072351
pop rdx
call fcn.14001e570
or rax, rax
je 0x140005307
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov qword [r15 + rbp], 0
push 0
pop rcx
call fcn.14001a450
mov rax, rax
push rax
mov r15, qword [0x1400c34ac]
mov rbp, qword [0x1400c3fac]
shl r15, 3
pop qword [r15 + rbp]
mov rax, qword [0x1400c4620]
push rax
sub rsp, 8
push rax
sub rsp, 8
push qword [0x1400c4620]
push 1
mov r15, qword [0x1400c34ac]
shl r15, 3
push qword [r15 + rbp]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000f3b0
add rsp, 0x28
mov rdx, qword [0x1400c4630]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.14000f570
add rsp, 0x28
pop qword [0x1400c4620]
mov rax, rax
push rax
mov r15, qword [0x1400c34ac]
shl r15, 3
pop qword [r15 + rbp]
inc qword [0x1400c34ac]
jno 0x140005226
push 0
pop rcx
call fcn.140019940
movabs rax, 0x140000000
mov qword [0x1400c36e4], rax
mov r15, qword [0x1400c3614]
sub r15, qword [0x1400c36e4]
movabs rax, 0x140341b46
add r15, rax
mov qword [0x1400c36ec], r15
mov r15, qword [0x1400c3614]
sub r15, qword [0x1400c36e4]
movabs rax, 0x14030c858
add r15, rax
mov qword [0x1400c36f4], r15
mov r15, qword [0x1400c3614]
sub r15, qword [0x1400c36e4]
movabs rax, 0x1404793f8
add r15, rax
mov qword [0x1400c36fc], r15
mov r15, qword [0x1400c3614]
sub r15, qword [0x1400c36e4]
movabs rax, 0x140479655
add r15, rax
mov qword [0x1400c3704], r15
mov r15, qword [0x1400c3614]
sub r15, qword [0x1400c36e4]
movabs rax, 0x14047fc42
add r15, rax
mov qword [0x1400c370c], r15
mov r15, qword [0x1400c3614]
sub r15, qword [0x1400c36e4]
movabs rax, 0x1416036d8
add r15, rax
mov qword [0x1400c3714], r15
mov r15, qword [0x1400c3614]
sub r15, qword [0x1400c36e4]
movabs rax, 0x143e14310
add r15, rax
mov qword [0x1400c371c], r15
mov r15, qword [0x1400c3614]
sub r15, qword [0x1400c36e4]
movabs rax, 0x145ad8448
add r15, rax
mov qword [0x1400c3724], r15
push 0x48
mov r15, qword [0x1400c34f4]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x89
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 4
mov r15, qword [0x1400c34f4]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x25
mov r15, qword [0x1400c34f4]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x3f
mov r15, qword [0x1400c34f4]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x91
mov r15, qword [0x1400c34f4]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x42
mov r15, qword [0x1400c34f4]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x83
mov r15, qword [0x1400c34f4]
add r15, 8
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x3c
mov r15, qword [0x1400c34f4]
add r15, 9
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x25
mov r15, qword [0x1400c34f4]
add r15, 0xa
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 8
mov r15, qword [0x1400c34f4]
add r15, 0xb
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x3f
mov r15, qword [0x1400c34f4]
add r15, 0xc
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x91
mov r15, qword [0x1400c34f4]
add r15, 0xd
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x42
mov r15, qword [0x1400c34f4]
add r15, 0xe
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 1
mov r15, qword [0x1400c34f4]
add r15, 0xf
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x75
mov r15, qword [0x1400c34f4]
add r15, 0x10
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xa
mov r15, qword [0x1400c34f4]
add r15, 0x11
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xc7
mov r15, qword [0x1400c34f4]
add r15, 0x12
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push pe_nt_image_headers64
mov r15, qword [0x1400c34f4]
add r15, 0x13
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x7c
mov r15, qword [0x1400c34f4]
add r15, 0x14
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 1
mov r15, qword [0x1400c34f4]
add r15, 0x15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x16
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x17
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x64
mov r15, qword [0x1400c34f4]
add r15, 0x18
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x19
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x1a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x1b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x83
mov r15, qword [0x1400c34f4]
add r15, 0x1c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xb8
mov r15, qword [0x1400c34f4]
add r15, 0x1d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x7c
mov r15, qword [0x1400c34f4]
add r15, 0x1e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 1
mov r15, qword [0x1400c34f4]
add r15, 0x1f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x20
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x21
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x22
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xc3
mov r15, qword [0x1400c34f4]
add r15, 0x23
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 0x24
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xcc
mov r15, qword [0x1400c34f4]
add r15, 0x25
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xcc
mov r15, qword [0x1400c34f4]
add r15, 0x26
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xcc
mov r15, qword [0x1400c34f4]
add r15, 0x27
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xcc
mov r15, qword [0x1400c34f4]
add r15, 0x28
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xcc
mov r15, qword [0x1400c34f4]
add r15, 0x29
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xcc
mov r15, qword [0x1400c34f4]
add r15, 0x2a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xcc
mov r15, qword [0x1400c34f4]
add r15, 0x2b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xcc
mov r15, qword [0x1400c34f4]
add r15, 0x2c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xcc
mov r15, qword [0x1400c34f4]
add r15, 0x2d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xcc
mov r15, qword [0x1400c34f4]
add r15, 0x2e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xcc
mov r15, qword [0x1400c34f4]
add r15, 0x2f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x48
mov r15, qword [0x1400c34f4]
add r15, 0x30
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x39
mov r15, qword [0x1400c34f4]
add r15, 0x31
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x3c
mov r15, qword [0x1400c34f4]
add r15, 0x32
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x25
mov r15, qword [0x1400c34f4]
add r15, 0x33
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x34
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x3f
mov r15, qword [0x1400c34f4]
add r15, 0x35
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x91
mov r15, qword [0x1400c34f4]
add r15, 0x36
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x42
mov r15, qword [0x1400c34f4]
add r15, 0x37
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x75
mov r15, qword [0x1400c34f4]
add r15, 0x38
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xb
mov r15, qword [0x1400c34f4]
add r15, 0x39
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x83
mov r15, qword [0x1400c34f4]
add r15, 0x3a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x3c
mov r15, qword [0x1400c34f4]
add r15, 0x3b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x25
mov r15, qword [0x1400c34f4]
add r15, 0x3c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 8
mov r15, qword [0x1400c34f4]
add r15, 0x3d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x3f
mov r15, qword [0x1400c34f4]
add r15, 0x3e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x91
mov r15, qword [0x1400c34f4]
add r15, 0x3f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x42
mov r15, qword [0x1400c34f4]
add r15, 0x40
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 1
mov r15, qword [0x1400c34f4]
add r15, 0x41
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x75
mov r15, qword [0x1400c34f4]
add r15, 0x42
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xd
mov r15, qword [0x1400c34f4]
add r15, 0x43
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xc3
mov r15, qword [0x1400c34f4]
add r15, 0x44
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x83
mov r15, qword [0x1400c34f4]
add r15, 0x45
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x3c
mov r15, qword [0x1400c34f4]
add r15, 0x46
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x25
mov r15, qword [0x1400c34f4]
add r15, 0x47
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xc
mov r15, qword [0x1400c34f4]
add r15, 0x48
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x3f
mov r15, qword [0x1400c34f4]
add r15, 0x49
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x91
mov r15, qword [0x1400c34f4]
add r15, 0x4a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x42
mov r15, qword [0x1400c34f4]
add r15, 0x4b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 1
mov r15, qword [0x1400c34f4]
add r15, 0x4c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x75
mov r15, qword [0x1400c34f4]
add r15, 0x4d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 2
mov r15, qword [0x1400c34f4]
add r15, 0x4e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x31
mov r15, qword [0x1400c34f4]
add r15, 0x4f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xc0
mov r15, qword [0x1400c34f4]
add r15, 0x50
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x89
mov r15, qword [0x1400c34f4]
add r15, 0x51
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x87
mov r15, qword [0x1400c34f4]
add r15, 0x52
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x7c
mov r15, qword [0x1400c34f4]
add r15, 0x53
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 1
mov r15, qword [0x1400c34f4]
add r15, 0x54
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x55
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x56
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xc3
mov r15, qword [0x1400c34f4]
add r15, 0x57
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x58
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x59
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x5a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x5b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x5c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x5d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x5e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x5f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x48
mov r15, qword [0x1400c34f4]
add r15, 0x60
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x89
mov r15, qword [0x1400c34f4]
add r15, 0x61
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x14
mov r15, qword [0x1400c34f4]
add r15, 0x62
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x25
mov r15, qword [0x1400c34f4]
add r15, 0x63
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x10
mov r15, qword [0x1400c34f4]
add r15, 0x64
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x3f
mov r15, qword [0x1400c34f4]
add r15, 0x65
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x91
mov r15, qword [0x1400c34f4]
add r15, 0x66
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x42
mov r15, qword [0x1400c34f4]
add r15, 0x67
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x8b
mov r15, qword [0x1400c34f4]
add r15, 0x68
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x82
mov r15, qword [0x1400c34f4]
add r15, 0x69
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xf4
mov r15, qword [0x1400c34f4]
add r15, 0x6a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 5
mov r15, qword [0x1400c34f4]
add r15, 0x6b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x6c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x6d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xc3
mov r15, qword [0x1400c34f4]
add r15, 0x6e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 0x6f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x83
mov r15, qword [0x1400c34f4]
add r15, 0x70
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x3c
mov r15, qword [0x1400c34f4]
add r15, 0x71
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x25
mov r15, qword [0x1400c34f4]
add r15, 0x72
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x18
mov r15, qword [0x1400c34f4]
add r15, 0x73
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x3f
mov r15, qword [0x1400c34f4]
add r15, 0x74
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x91
mov r15, qword [0x1400c34f4]
add r15, 0x75
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x42
mov r15, qword [0x1400c34f4]
add r15, 0x76
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 1
mov r15, qword [0x1400c34f4]
add r15, 0x77
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x75
mov r15, qword [0x1400c34f4]
add r15, 0x78
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xd
mov r15, qword [0x1400c34f4]
add r15, 0x79
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x48
mov r15, qword [0x1400c34f4]
add r15, 0x7a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x83
mov r15, qword [0x1400c34f4]
add r15, 0x7b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xf9
mov r15, qword [0x1400c34f4]
add r15, 0x7c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 1
mov r15, qword [0x1400c34f4]
add r15, 0x7d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x75
mov r15, qword [0x1400c34f4]
add r15, 0x7e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 7
mov r15, qword [0x1400c34f4]
add r15, 0x7f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xc6
mov r15, qword [0x1400c34f4]
add r15, 0x80
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push pe_nt_image_headers64
mov r15, qword [0x1400c34f4]
add r15, 0x81
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x41
mov r15, qword [0x1400c34f4]
add r15, 0x82
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 1
mov r15, qword [0x1400c34f4]
add r15, 0x83
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x84
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x85
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x86
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x4c
mov r15, qword [0x1400c34f4]
add r15, 0x87
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x39
mov r15, qword [0x1400c34f4]
add r15, 0x88
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xa8
mov r15, qword [0x1400c34f4]
add r15, 0x89
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x10
mov r15, qword [0x1400c34f4]
add r15, 0x8a
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 2
mov r15, qword [0x1400c34f4]
add r15, 0x8b
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x8c
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0
mov r15, qword [0x1400c34f4]
add r15, 0x8d
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0xc3
mov r15, qword [0x1400c34f4]
add r15, 0x8e
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 0x8f
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 0x2ac
push qword [0x1400c34f4]
mov r15, qword [0x1400c3614]
add r15, 0x1091
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c36a4]
add r15, 0x3f00
mov rax, r15
push rax
push qword [0x1400c34f4]
pop rcx
pop rdx
call fcn.14001d6f0
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c3614]
add r15, 0x1095
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c3614]
add r15, 0x10c5
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c36a4]
add r15, 0x3f08
mov rax, r15
push rax
push qword [0x1400c34f4]
pop rcx
pop rdx
call fcn.14001d6f0
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c3614]
add r15, 0x109c
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c3614]
add r15, 0x10ce
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c36a4]
add r15, 0x3f0c
mov rax, r15
push rax
push qword [0x1400c34f4]
pop rcx
pop rdx
call fcn.14001d6f0
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c3614]
add r15, 0x10d9
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c36a4]
add r15, 0x3f10
mov rax, r15
push rax
push qword [0x1400c34f4]
pop rcx
pop rdx
call fcn.14001d6f0
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c3614]
add r15, 0x10f5
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c36a4]
add r15, 0x3f18
mov rax, r15
push rax
push qword [0x1400c34f4]
pop rcx
pop rdx
call fcn.14001d6f0
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c3614]
add r15, 0x1104
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push 0xe8
mov r15, qword [0x1400c34f4]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c3614]
add r15, 0x1091
sub r15, qword [0x1400c36ec]
add r15, 0xfffffffffffffffb
mov rax, r15
push rax
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d6f0
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 7
push qword [0x1400c34f4]
push qword [0x1400c36ec]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push 0xe8
mov r15, qword [0x1400c34f4]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c3614]
add r15, 0x10c1
sub r15, qword [0x1400c36f4]
add r15, 0xfffffffffffffffb
mov rax, r15
push rax
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d6f0
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 6
push qword [0x1400c34f4]
push qword [0x1400c36f4]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push 0xe8
mov r15, qword [0x1400c34f4]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c3614]
add r15, 0x10f1
sub r15, qword [0x1400c370c]
add r15, 0xfffffffffffffffb
mov rax, r15
push rax
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d6f0
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 6
push qword [0x1400c34f4]
push qword [0x1400c370c]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push 0xe8
mov r15, qword [0x1400c34f4]
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 3
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 4
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 5
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 6
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 7
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
mov r15, qword [0x1400c3614]
add r15, 0x1101
sub r15, qword [0x1400c372c]
add r15, 0xfffffffffffffffb
mov rax, r15
push rax
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
call fcn.14001d6f0
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 7
push qword [0x1400c34f4]
push qword [0x1400c372c]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
mov qword [0x1400c3734], 0
mov rax, 0xff
cmp rax, qword [0x1400c3734]
jl 0x140007096
push qword [0x1400c3734]
pop rcx
call sub.USER32.DLL_GetAsyncKeyState
inc qword [0x1400c3734]
jno 0x140007071
call sub.KERNEL32.dll_IsDebuggerPresent
and rax, rax
je 0x1400070a6
push 0x55009553
ret
push 0x32
pop rcx
call fcn.1400130e0
mov qword [0x1400c373c], rax
mov r15, qword [0x1400c373c]
cmp r15, 0x19
jne 0x140007199
mov r15, qword [0x1400c3544]
cmp r15, qword [0x1400c3554]
jne 0x1400070f3
mov r15, qword [0x1400c3544]
and r15, r15
je 0x1400070f3
mov r15, qword [0x1400c3554]
and r15, r15
je 0x1400070f3
jmp 0x1400070fc
mov rax, 1
jmp 0x1400070ff
xor rax, rax
and rax, rax
je 0x140007199
push 0xff
pop rcx
call fcn.1400130e0
mov qword [0x1400c36ac], rax
push 0x190
pop rcx
call fcn.1400130e0
mov qword [0x1400c36b4], rax
push qword [0x1400c36ac]
push qword [0x1400c34f4]
pop rcx
pop rdx
call fcn.14001d670
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 1
push qword [0x1400c34f4]
mov r15, qword [0x1400c36a4]
add r15, qword [0x1400c36b4]
add r15, 0x1091
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
call fcn.14000b5cc
sub rsp, 8
push qword [0x1400c34ec]
push 8
push qword [0x1400c34f4]
mov r15, qword [0x1400c36a4]
add r15, 0x3f00
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_ReadProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push qword [0x1400c34f4]
pop rcx
call fcn.14001d700
mov qword [0x1400c3744], rax
mov r15, qword [0x1400c3744]
add r15, 0x1c
mov qword [0x1400c374c], r15
mov r15, qword [0x1400c3744]
add r15, 0x20
mov qword [0x1400c3754], r15
mov r15, qword [0x1400c3744]
add r15, 0x24
mov qword [0x1400c375c], r15
sub rsp, 8
push qword [0x1400c34ec]
push 8
push qword [0x1400c34f4]
mov r15, qword [0x1400c36a4]
add r15, 0x3f10
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_ReadProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push qword [0x1400c34f4]
pop rcx
call fcn.14001d700
mov qword [0x1400c3744], rax
mov r15, qword [0x1400c3744]
add r15, 0x5f4
mov qword [0x1400c3764], r15
mov r15, qword [0x1400c3744]
add r15, 0x628
mov qword [0x1400c376c], r15
mov r15, qword [0x1400c3744]
add r15, 0x7dc
mov qword [0x1400c3774], r15
mov r15, qword [0x1400c3744]
add r15, 0x828
mov qword [0x1400c377c], r15
mov r15, qword [0x1400c3744]
add r15, 0x7bc
mov qword [0x1400c3784], r15
sub rsp, 8
push qword [0x1400c34ec]
push 8
push qword [0x1400c34f4]
push qword [0x1400c3714]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_ReadProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push qword [0x1400c34f4]
pop rcx
call fcn.14001d700
mov r15, rax
add r15, 0x10
mov qword [0x1400c378c], r15
sub rsp, 8
push qword [0x1400c34ec]
push 8
push qword [0x1400c34f4]
push qword [0x1400c371c]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_ReadProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push qword [0x1400c34f4]
pop rcx
call fcn.14001d700
mov r15, rax
add r15, 0x10
mov qword [0x1400c3794], r15
sub rsp, 8
push qword [0x1400c34ec]
push 8
push qword [0x1400c34f4]
push qword [0x1400c3724]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_ReadProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push qword [0x1400c34f4]
pop rcx
call fcn.14001d700
mov r15, rax
add r15, 0x10
mov qword [0x1400c379c], r15
mov qword [0x1400c37a4], 1
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c37ac], rax
mov r15, qword [0x1400c37ac]
and r15, r15
je 0x1400075ec
push qword [0x1400c37b4]
xor r15, r15
cmp r15, qword [rsp]
jne 0x140007539
mov qword [0x1400c37b4], 1
sub rsp, 8
push 1
push qword [0x1400c34f4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d6f0
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c36a4]
add r15, 0x3f08
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
jmp 0x1400075eb
mov r15, 1
cmp r15, qword [rsp]
jne 0x1400075eb
mov qword [0x1400c37b4], 0
sub rsp, 8
push 0
push qword [0x1400c34f4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d6f0
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c36a4]
add r15, 0x3f08
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
pop rax
mov qword [0x1400c37a4], 2
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c37bc], rax
mov r15, qword [0x1400c37bc]
and r15, r15
je 0x1400077ed
push qword [0x1400c37c4]
xor r15, r15
cmp r15, qword [rsp]
jne 0x14000773a
mov qword [0x1400c37c4], 1
sub rsp, 8
push 1
push qword [0x1400c34f4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d6f0
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c36a4]
add r15, 0x3f0c
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
jmp 0x1400077ec
mov r15, 1
cmp r15, qword [rsp]
jne 0x1400077ec
mov qword [0x1400c37c4], 0
sub rsp, 8
push 0
push qword [0x1400c34f4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d6f0
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c36a4]
add r15, 0x3f0c
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
pop rax
mov qword [0x1400c37a4], 3
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c37cc], rax
mov r15, qword [0x1400c37cc]
and r15, r15
je 0x140007a96
push qword [0x1400c37d4]
xor r15, r15
cmp r15, qword [rsp]
jne 0x14000798f
mov qword [0x1400c37d4], 1
sub rsp, 8
push 0x45
mov r15, qword [0x1400c34f4]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d670
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0x31
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d670
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0xc0
mov r15, qword [0x1400c34f4]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d670
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 3
push qword [0x1400c34f4]
push qword [0x1400c36fc]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
jmp 0x140007a95
mov r15, 1
cmp r15, qword [rsp]
jne 0x140007a95
mov qword [0x1400c37d4], 0
sub rsp, 8
push 0x44
mov r15, qword [0x1400c34f4]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d670
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0x8b
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d670
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0xc6
mov r15, qword [0x1400c34f4]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d670
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 3
push qword [0x1400c34f4]
push qword [0x1400c36fc]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
pop rax
mov qword [0x1400c37a4], 4
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c37dc], rax
mov r15, qword [0x1400c37dc]
and r15, r15
je 0x140007d3f
push qword [0x1400c37e4]
xor r15, r15
cmp r15, qword [rsp]
jne 0x140007c38
mov qword [0x1400c37e4], 1
sub rsp, 8
push 0x31
mov r15, qword [0x1400c34f4]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d670
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0xff
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d670
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0x90
mov r15, qword [0x1400c34f4]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d670
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 3
push qword [0x1400c34f4]
push qword [0x1400c3704]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
jmp 0x140007d3e
mov r15, 1
cmp r15, qword [rsp]
jne 0x140007d3e
mov qword [0x1400c37e4], 0
sub rsp, 8
push 0x41
mov r15, qword [0x1400c34f4]
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d670
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0x8b
mov r15, qword [0x1400c34f4]
inc r15
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d670
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0xf9
mov r15, qword [0x1400c34f4]
add r15, 2
mov rax, r15
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d670
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 3
push qword [0x1400c34f4]
push qword [0x1400c3704]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
pop rax
mov qword [0x1400c37a4], 5
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c37ec], rax
mov r15, qword [0x1400c37ec]
and r15, r15
je 0x140007e69
mov rax, qword [0x1400c3764]
mov qword [0x1400c34ac], rax
mov r15, qword [0x1400c3764]
add r15, 0x18
cmp r15, qword [0x1400c34ac]
jl 0x140007e53
push 0
push qword [0x1400c34f4]
pop rcx
pop rdx
call fcn.14001d6f0
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c34ac]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
inc qword [0x1400c34ac]
jno 0x140007de2
push 0
pop rcx
call fcn.140011b80
push 0x12c
pop rcx
call fcn.140013018
mov qword [0x1400c37a4], 6
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c37f4], rax
mov r15, qword [0x1400c37f4]
and r15, r15
je 0x1400080cd
mov rax, qword [0x1400c3774]
mov qword [0x1400c34ac], rax
mov r15, qword [0x1400c3774]
add r15, 0x18
cmp r15, qword [0x1400c34ac]
jl 0x140007f91
fld dword [0x1400727c4]
sub rsp, 8
fstp dword [rsp]
push qword [0x1400c34f4]
pop rcx
movss xmm1, dword [rsp]
add rsp, 8
call fcn.14001d710
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c34ac]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
inc qword [0x1400c34ac]
jno 0x140007f0c
mov rax, qword [0x1400c377c]
mov qword [0x1400c34ac], rax
mov r15, qword [0x1400c377c]
add r15, 0x20
cmp r15, qword [0x1400c34ac]
jl 0x140008024
fld dword [0x1400727c4]
sub rsp, 8
fstp dword [rsp]
push qword [0x1400c34f4]
pop rcx
movss xmm1, dword [rsp]
add rsp, 8
call fcn.14001d710
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c34ac]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
inc qword [0x1400c34ac]
jno 0x140007f9f
mov rax, qword [0x1400c3784]
mov qword [0x1400c34ac], rax
mov r15, qword [0x1400c3784]
add r15, 0x14
cmp r15, qword [0x1400c34ac]
jl 0x1400080b7
fld dword [0x1400727c4]
sub rsp, 8
fstp dword [rsp]
push qword [0x1400c34f4]
pop rcx
movss xmm1, dword [rsp]
add rsp, 8
call fcn.14001d710
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c34ac]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
inc qword [0x1400c34ac]
jno 0x140008032
push 0
pop rcx
call fcn.140011b80
push 0x12c
pop rcx
call fcn.140013018
mov qword [0x1400c37a4], 7
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c37fc], rax
mov r15, qword [0x1400c37fc]
and r15, r15
je 0x1400081d8
fld dword [0x1400727c4]
sub rsp, 8
fstp dword [rsp]
push qword [0x1400c34f4]
pop rcx
movss xmm1, dword [rsp]
add rsp, 8
call fcn.14001d710
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c376c]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push 0
pop rcx
call fcn.140011b80
push 0x12c
pop rcx
call fcn.140013018
mov qword [0x1400c37a4], 8
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c3804], rax
mov r15, qword [0x1400c3804]
and r15, r15
je 0x140008368
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c378c]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_ReadProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push qword [0x1400c34f4]
pop rcx
call fcn.14001d720
movss dword [rsp - 8], xmm0
fld dword [rsp - 8]
fstp dword [0x1400c3c3c]
fld dword [0x1400c3c3c]
fdiv dword [0x1400727b8]
fstp dword [0x1400c3c3c]
fld dword [0x1400c3c3c]
fcomp dword [0x1400727c8]
fnstsw ax
test ah, 1
je 0x1400082f4
mov qword [0x1400c380c], 0
mov eax, dword [0x1400c3c3c]
push rax
push qword [0x1400c34f4]
pop rcx
movss xmm1, dword [rsp]
add rsp, 8
call fcn.14001d710
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c378c]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push 0
pop rcx
call fcn.140011b80
push 0x12c
pop rcx
call fcn.140013018
mov qword [0x1400c37a4], 9
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c3814], rax
mov r15, qword [0x1400c3814]
and r15, r15
je 0x1400084f7
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c378c]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_ReadProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push qword [0x1400c34f4]
pop rcx
call fcn.14001d720
movss dword [rsp - 8], xmm0
fld dword [rsp - 8]
fstp dword [0x1400c3c3c]
fld dword [0x1400c3c3c]
fmul dword [0x1400727b8]
fstp dword [0x1400c3c3c]
fld dword [0x1400c3c3c]
fcomp dword [0x1400727cc]
fnstsw ax
test ah, 0x41
jne 0x140008483
mov dword [0x1400c3c3c], 0x3f800000
mov eax, dword [0x1400c3c3c]
push rax
push qword [0x1400c34f4]
pop rcx
movss xmm1, dword [rsp]
add rsp, 8
call fcn.14001d710
mov qword [0x1400c347c], rax
sub rsp, 8
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c378c]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x30
mov qword [0x1400c347c], rax
push 0
pop rcx
call fcn.140011b80
push 0x12c
pop rcx
call fcn.140013018
mov qword [0x1400c37a4], 0xa
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c381c], rax
mov r15, qword [0x1400c381c]
and r15, r15
je 0x1400086e0
push qword [0x1400c3824]
xor r15, r15
cmp r15, qword [rsp]
jne 0x140008639
mov qword [0x1400c3824], 1
sub rsp, 8
push 0x3e8
push qword [0x1400c34f4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d6f0
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c3794]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
jmp 0x1400086df
mov r15, 1
cmp r15, qword [rsp]
jne 0x1400086df
mov qword [0x1400c3824], 0
sub rsp, 8
push 0xbe
push qword [0x1400c34f4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d6f0
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c3794]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
pop rax
mov qword [0x1400c37a4], 0xb
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c382c], rax
mov r15, qword [0x1400c382c]
and r15, r15
je 0x1400088e9
push qword [0x1400c3834]
xor r15, r15
cmp r15, qword [rsp]
jne 0x140008832
mov qword [0x1400c3834], 1
sub rsp, 8
fld dword [0x1400727d0]
sub rsp, 8
fstp dword [rsp]
push qword [0x1400c34f4]
pop rcx
movss xmm1, dword [rsp]
add rsp, 8
sub rsp, 0x20
call fcn.14001d710
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c379c]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
jmp 0x1400088e8
mov r15, 1
cmp r15, qword [rsp]
jne 0x1400088e8
mov qword [0x1400c3834], 0
sub rsp, 8
fld dword [0x1400727d4]
sub rsp, 8
fstp dword [rsp]
push qword [0x1400c34f4]
pop rcx
movss xmm1, dword [rsp]
add rsp, 8
sub rsp, 0x20
call fcn.14001d710
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
push qword [0x1400c379c]
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
pop rax
mov qword [0x1400c37a4], 0xc
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c383c], rax
mov r15, qword [0x1400c383c]
and r15, r15
je 0x140008aea
push qword [0x1400c3844]
xor r15, r15
cmp r15, qword [rsp]
jne 0x140008a37
mov qword [0x1400c3844], 1
sub rsp, 8
push 1
push qword [0x1400c34f4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d6f0
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c36a4]
add r15, 0x3f18
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
jmp 0x140008ae9
mov r15, 1
cmp r15, qword [rsp]
jne 0x140008ae9
mov qword [0x1400c3844], 0
sub rsp, 8
push 0
push qword [0x1400c34f4]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001d6f0
add rsp, 0x28
mov qword [0x1400c347c], rax
push qword [0x1400c34ec]
push 4
push qword [0x1400c34f4]
mov r15, qword [0x1400c36a4]
add r15, 0x3f18
mov rax, r15
push rax
push qword [0x1400c36c4]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.KERNEL32.dll_WriteProcessMemory
add rsp, 0x28
mov qword [0x1400c347c], rax
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.140011b80
add rsp, 0x28
sub rsp, 8
push 0x12c
pop rcx
sub rsp, 0x20
call fcn.140013018
add rsp, 0x28
pop rax
mov qword [0x1400c37a4], 0xd
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c384c], rax
mov r15, qword [0x1400c384c]
and r15, r15
je 0x140008b7b
mov qword [0x1400c37a4], 0xe
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c3854], rax
mov r15, qword [0x1400c3854]
and r15, r15
je 0x140008c0c
mov qword [0x1400c37a4], 0xf
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c385c], rax
mov r15, qword [0x1400c385c]
and r15, r15
je 0x140008c9d
mov qword [0x1400c37a4], 0x10
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c3864], rax
mov r15, qword [0x1400c3864]
and r15, r15
je 0x140008d2e
mov qword [0x1400c37a4], 0x11
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c386c], rax
mov r15, qword [0x1400c386c]
and r15, r15
je 0x140008dbf
mov qword [0x1400c37a4], 0x12
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c3874], rax
mov r15, qword [0x1400c3874]
and r15, r15
je 0x140008e50
mov qword [0x1400c37a4], 0x13
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c387c], rax
mov r15, qword [0x1400c387c]
and r15, r15
je 0x140008ee1
mov qword [0x1400c37a4], 0x14
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fdc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fcc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fbc]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
mov r15, qword [0x1400c37a4]
mov rbp, qword [0x1400c3fac]
shl r15, 3
mov rax, qword [r15 + rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14000d9f7
mov qword [0x1400c3884], rax
mov r15, qword [0x1400c3884]
and r15, r15
je 0x140008f72
mov qword [0x1400c37ac], 0
mov qword [0x1400c37bc], 0
mov qword [0x1400c37cc], 0
mov qword [0x1400c37dc], 0
mov qword [0x1400c37ec], 0
mov qword [0x1400c37f4], 0
mov qword [0x1400c37fc], 0
mov qword [0x1400c3804], 0
mov qword [0x1400c3814], 0
mov qword [0x1400c381c], 0
mov qword [0x1400c382c], 0
mov qword [0x1400c383c], 0
mov qword [0x1400c384c], 0
mov qword [0x1400c3854], 0
mov qword [0x1400c385c], 0
mov qword [0x1400c3864], 0
mov qword [0x1400c386c], 0
mov qword [0x1400c3874], 0
mov qword [0x1400c387c], 0
mov qword [0x1400c3884], 0
mov r15, qword [0x1400c3594]
cmp r15, 0x45a2a5
je 0x14000906f
push 0
push 3
pop rcx
pop rdx
call fcn.140016a30
call fcn.14000a33e
push 1
pop rcx
call fcn.140013018
mov r15, qword [0x1400c3544]
cmp r15, qword [0x1400c3554]
jne 0x1400090a9
mov r15, qword [0x1400c3544]
and r15, r15
je 0x1400090a9
mov r15, qword [0x1400c3554]
and r15, r15
je 0x1400090a9
jmp 0x1400090b2
mov rax, 1
jmp 0x1400090b5
xor rax, rax
and rax, rax
je 0x140009120
push 0xa
pop rcx
call fcn.1400130e0
mov r15, rax
add r15, 0xa
mov qword [0x1400c36ac], r15
push 0x28
pop rcx
call fcn.1400130e0
mov r15, rax
add r15, 0x28
mov qword [0x1400c36b4], r15
mov r15, qword [0x1400c3614]
add r15, qword [0x1400c36ac]
mov qword [0x1400c3614], r15
mov r15, qword [0x1400c36a4]
add r15, qword [0x1400c36b4]
mov qword [0x1400c36a4], r15
call fcn.14000b5cc
jmp 0x1400053b2
jmp 0x140007066
call 0x14000cf2c
call fcn.14001e320
mov rcx, qword [0x1400c3454]
call sub.KERNEL32.dll_HeapDestroy
mov rcx, qword [0x1400c3464]
call sub.KERNEL32.dll_ExitProcess
sub rsp, 0x28
call fcn.140011cec
call fcn.1400134a0
call fcn.1400152e0
call fcn.140016fa8
call fcn.140019450
call fcn.140019784
call fcn.1400199d0
call fcn.14001ae24
call fcn.14001be68
call fcn.14001d630
add rsp, 0x28
ret