Function at 0x140279c10
Capabilities:
Check for unmoving mouse cursor
Log keystrokes via polling

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x168
mov rax, qword [0x14035bae8]
xor rax, rsp
mov qword [rsp + 0x160], rax
call fcn.14010fbf0
mov qword [rsp + 0x48], rax
mov eax, 0x2085677f
mov esi, 0x868bef09
mov edi, 0x90
nop
cmp eax, 0xd34151ae
jg 0x140279c70
cmp eax, 0x868bef09
je 0x140279c97
cmp eax, 0xb3a7975d
je 0x140279cb7
cmp eax, 0xca0b78e6
jne 0x140279c50
jmp 0x140279cdf
cmp eax, 0xd34151af
je 0x140279ca8
cmp eax, 0x4591c609
je 0x140279cc8
cmp eax, 0x2085677f
jne 0x140279c50
cmp qword [rsp + 0x48], 0
setne byte [rsp + 0x40]
mov eax, 0xb3a7975d
jmp 0x140279c50
call fcn.14012fb50
mov qword [rsp + 0x38], rax
mov eax, 0x4591c609
jmp 0x140279c50
mov rax, qword [rsp + 0x28]
mov rbx, qword [rax]
mov eax, 0xca0b78e6
jmp 0x140279c50
cmp byte [rsp + 0x40], 0
mov eax, 0xca0b78e6
cmovne eax, esi
xor ebx, ebx
jmp 0x140279c50
mov rax, qword [rsp + 0x38]
add rax, rdi
mov qword [rsp + 0x28], rax
mov eax, 0xd34151af
jmp 0x140279c50
mov qword [rsp + 0x80], rbx
call fcn.14012fb50
mov qword [rsp + 0xa0], rax
lea rdx, [rsp + 0x138]
mov qword [rsp + 0xa8], rdx
mov rax, qword [rsp + 0xa8]
mov rax, qword [rsp + 0xa8]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov rax, qword [rsp + 0x80]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetClientRect]
lea rax, [rsp + 0x130]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xb0]
mov eax, dword [rsp + 0x13c]
mov ecx, dword [rsp + 0x144]
mov dword [rsp + 0xd4], ecx
mov dword [rsp + 0xd8], eax
mov eax, 0xc099f4d6
xor r13d, r13d
mov esi, 0xc03b80f2
lea rbx, [rsp + 0x150]
lea r14, [rsp + 0x158]
mov r15d, 0x61cb9b16
jmp 0x140279dc0
cmp eax, 0x9e21ecff
jne 0x14027b37c
mov eax, dword [0x14035cef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd8acd364
mov ecx, 0xf9f5adbe
cmove eax, ecx
cmp dword [0x14035cef4], 0xa
cmovl eax, ecx
nop word cs:[rax + rax]
nop
cmp eax, 0xe32ac73c
jle 0x140279e20
cmp eax, 0x190d6ae0
jg 0x140279e60
cmp eax, 0xfda071e7
jg 0x140279eda
cmp eax, 0xe32ac73d
je 0x14027a09d
cmp eax, 0xf9f5adbe
jne 0x140279dc0
mov rax, qword [rsp + 0xb8]
mov ecx, dword [rsp + 0x64]
mov dword [rax], ecx
mov eax, dword [0x14035cef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd8acd364
mov ecx, 0x271c8e8a
jmp 0x140279da8
cmp eax, 0xc099f4d5
jle 0x140279e90
cmp eax, 0xd8acd363
jg 0x14027a01c
cmp eax, 0xc099f4d6
je 0x14027a0ac
cmp eax, 0xc56f1056
jne 0x140279dc0
test byte [rsp + 0x33], 1
mov eax, 0x190d6ae1
mov ecx, 0x165c7983
cmove eax, ecx
jmp 0x140279dc0
cmp eax, 0x42da53cd
jg 0x14027a071
cmp eax, 0x190d6ae1
je 0x14027a0ec
cmp eax, 0x271c8e8a
jne 0x140279dc0
mov eax, 0xe32ac73d
jmp 0x140279dc0
cmp eax, 0x9e21ecfe
jg 0x140279d84
cmp eax, 0x92c42625
je 0x14027a1ac
cmp eax, 0x998633c3
jne 0x140279dc0
mov rax, qword [rsp + 0xa0]
cmp byte [rax + 0x58], 0
mov eax, 0xdbddea76
mov ecx, 0x70ac658f
cmove eax, ecx
mov dword [rsp + 0x9c], 0xffffffff
jmp 0x140279dc0
cmp eax, 0xfda071e8
je 0x14027a1c3
cmp eax, 0x165c7983
jne 0x140279dc0
lea rcx, [rsp + 0x128]
mov qword [rsp + 0xf8], rcx
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x128], 0
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x80]
mov rdx, rax
sub rdx, qword [rcx + 0x18]
xorps xmm0, xmm0
cvtsi2ss xmm0, rdx
mov rdx, qword [rsp + 0x80]
xorps xmm1, xmm1
cvtsi2ss xmm1, qword [rdx + 0x20]
divss xmm0, xmm1
mov rdx, qword [rsp + 0xa0]
movss dword [rdx + 0x10], xmm0
mov qword [rcx + 0x18], rax
call fcn.14010fbf0
mov qword [rsp + 0x48], rax
mov eax, 0x2085677f
nop
cmp eax, 0xd34151ae
jg 0x140279fa0
cmp eax, 0x868bef09
je 0x140279fc7
cmp eax, 0xb3a7975d
je 0x140279fd8
cmp eax, 0xca0b78e6
jne 0x140279f70
jmp 0x14027a1cd
cmp eax, 0xd34151af
je 0x140279fee
cmp eax, 0x4591c609
je 0x14027a000
cmp eax, 0x2085677f
jne 0x140279f70
cmp qword [rsp + 0x48], 0
setne byte [rsp + 0x40]
mov eax, 0xb3a7975d
jmp 0x140279f70
call fcn.14012fb50
mov qword [rsp + 0x38], rax
mov eax, 0x4591c609
jmp 0x140279f70
cmp byte [rsp + 0x40], 0
mov eax, 0xca0b78e6
mov ecx, 0x868bef09
cmovne eax, ecx
xor edi, edi
jmp 0x140279f70
mov rax, qword [rsp + 0x28]
mov rdi, qword [rax]
mov eax, 0xca0b78e6
jmp 0x140279f70
mov rax, qword [rsp + 0x38]
mov ecx, 0x90
add rax, rcx
mov qword [rsp + 0x28], rax
mov eax, 0xd34151af
jmp 0x140279f70
cmp eax, 0xd8acd364
je 0x14027b036
cmp eax, 0xdbddea76
jne 0x140279dc0
mov eax, dword [rsp + 0x9c]
mov dword [rsp + 0x64], eax
mov rax, qword [rsp + 0x80]
add rax, 0x28
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xb8]
mov eax, dword [rax]
cmp eax, dword [rsp + 0x64]
mov eax, 0x9e21ecff
mov ecx, 0x92c42625
cmove eax, ecx
jmp 0x140279dc0
cmp eax, 0x42da53ce
je 0x14027b04e
cmp eax, 0x70ac658f
jne 0x140279dc0
call fcn.1401b4260
mov dword [rsp + 0xdc], eax
mov eax, 0x42da53ce
jmp 0x140279dc0
call fcn.14027b3c0
mov eax, 0x92c42625
jmp 0x140279dc0
mov eax, dword [rsp + 0xd4]
sub eax, dword [rsp + 0xd8]
mov ecx, dword [rsp + 0x140]
sub ecx, dword [rsp + 0x138]
mov edx, 0xd37290d5
nop dword [rax]
cmp edx, 0xd37290d5
je 0x14027a0e5
cmp edx, 0xf5d3064
jne 0x14027a0d0
jmp 0x14027b066
mov edx, 0xf5d3064
jmp 0x14027a0d0
call fcn.14010fbf0
mov qword [rsp + 0x48], rax
mov eax, 0x2085677f
nop dword [rax + rax]
cmp eax, 0xd34151ae
jg 0x14027a130
cmp eax, 0x868bef09
je 0x14027a157
cmp eax, 0xb3a7975d
je 0x14027a168
cmp eax, 0xca0b78e6
jne 0x14027a100
jmp 0x14027b0cb
cmp eax, 0xd34151af
je 0x14027a17e
cmp eax, 0x4591c609
je 0x14027a190
cmp eax, 0x2085677f
jne 0x14027a100
cmp qword [rsp + 0x48], 0
setne byte [rsp + 0x40]
mov eax, 0xb3a7975d
jmp 0x14027a100
call fcn.14012fb50
mov qword [rsp + 0x38], rax
mov eax, 0x4591c609
jmp 0x14027a100
cmp byte [rsp + 0x40], 0
mov eax, 0xca0b78e6
mov ecx, 0x868bef09
cmovne eax, ecx
xor edi, edi
jmp 0x14027a100
mov rax, qword [rsp + 0x28]
mov rdi, qword [rax]
mov eax, 0xca0b78e6
jmp 0x14027a100
mov rax, qword [rsp + 0x38]
mov ecx, 0x90
add rax, rcx
mov qword [rsp + 0x28], rax
mov eax, 0xd34151af
jmp 0x14027a100
call fcn.14027bab0
mov rax, qword [rsp + 0xf8]
mov eax, 0xb55b44f4
jmp 0x140279dc0
mov eax, 0x165c7983
jmp 0x140279dc0
mov qword [rsp + 0xc0], rdi
mov eax, 0xc4a6cc0b
jmp 0x14027a240
mov rcx, r14
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
setne byte [rsp + 0x32]
movzx eax, byte [rsp + 0x32]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0
setne byte [rsp + 0x34]
mov eax, dword [0x14035cf08]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9b21147
mov ecx, 0x809f320f
cmove eax, ecx
cmp dword [0x14035cf0c], 0xa
cmovl eax, ecx
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0xd5236e09
jle 0x14027a2a0
cmp eax, 0x1962f0d7
jle 0x14027a310
cmp eax, 0x419f67aa
jg 0x14027a3ca
cmp eax, 0x30312b42
jg 0x14027a4fe
cmp eax, 0x1962f0d8
je 0x14027a6ed
cmp eax, 0x1caa5931
je 0x14027a708
cmp eax, 0x2eff38b1
jne 0x14027a240
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x90], rax
mov eax, 0x9d82643a
jmp 0x14027a240
cmp eax, 0xa1e39990
jle 0x14027a370
cmp eax, 0xc03b80f1
jg 0x14027a43a
cmp eax, 0xaeccac68
jg 0x14027a54b
cmp eax, 0xa1e39991
je 0x14027a71d
cmp eax, 0xa58b936d
je 0x14027a727
cmp eax, 0xad438842
jne 0x14027a240
mov rax, qword [rsp + 0x50]
mov ecx, dword [rsp + 0xe4]
mov dword [rax], ecx
mov rax, qword [rsp + 0x68]
test byte [rax + 1], 4
mov eax, 0x12edfc3d
mov ecx, 0x1962f0d8
cmove eax, ecx
jmp 0x14027a240
cmp eax, 0x9b21146
jle 0x14027a475
cmp eax, 0xfe06b04
jg 0x14027a5b0
cmp eax, 0x9b21147
je 0x14027a754
cmp eax, 0x9b767a2
je 0x14027a76d
cmp eax, 0xd40f736
jne 0x14027a240
mov rcx, qword [rsp + 0x118]
call fcn.1401cbe50
mov qword [rsp + 0x120], rax
mov eax, 0xe74bf2ad
jmp 0x14027a240
cmp eax, 0x954881b0
jle 0x14027a4b8
cmp eax, 0x9e2ef707
jg 0x14027a5db
cmp eax, 0x954881b1
je 0x14027a786
cmp eax, 0x98bf4acb
je 0x14027a7a3
cmp eax, 0x9d82643a
jne 0x14027a240
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax]
lea rdx, [rsp + 0x148]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov eax, 0x3822ab43
jmp 0x14027a240
cmp eax, 0x6497fb1b
jg 0x14027a618
cmp eax, 0x419f67ab
je 0x14027a1dc
cmp eax, 0x515b7729
je 0x14027a7bd
cmp eax, 0x6126407a
jne 0x14027a240
lea rax, [rsp + 0x148]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rax]
mov qword [rcx], rax
mov rax, qword [rsp + 0x68]
mov eax, dword [rax]
mov ecx, 0x400
and eax, ecx
mov dword [rsp + 0xec], eax
mov eax, 0x515b7729
jmp 0x14027a240
cmp eax, 0xcdaa6780
jg 0x14027a653
cmp eax, 0xc03b80f2
je 0x14027a7d7
cmp eax, 0xc4a6cc0b
je 0x14027a7ed
cmp eax, 0xc5a3a973
jne 0x14027a240
mov qword [rsp + 0x48], r14
mov eax, 0xa58b936d
jmp 0x14027a240
cmp eax, 0xe9681fb6
jg 0x14027a68b
cmp eax, 0xd5236e0a
je 0x14027a811
cmp eax, 0xdea4875a
je 0x14027a830
cmp eax, 0xe74bf2ad
jne 0x14027a240
cmp qword [rsp + 0x120], 0
setne r12b
mov eax, 0xc03b80f2
jmp 0x14027a240
cmp eax, 0x89deb479
jle 0x14027a6b9
cmp eax, 0x89deb47a
je 0x14027a849
cmp eax, 0x8d889911
je 0x14027a856
cmp eax, 0x9388b4fe
jne 0x14027a240
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x118], rax
mov eax, 0xd40f736
jmp 0x14027a240
cmp eax, 0x30312b43
je 0x14027a865
cmp eax, 0x3482c670
je 0x14027a87c
cmp eax, 0x3822ab43
jne 0x14027a240
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [rsp + 0x14c]
movss dword [rsp + 0xf0], xmm0
lea rax, [rsp + 0x148]
mov qword [rsp + 0x40], rax
mov eax, 0xd01f9376
jmp 0x14027a240
cmp eax, 0xaeccac69
je 0x14027a893
cmp eax, 0xb3c228cd
je 0x14027a8ac
cmp eax, 0xbd6a662d
jne 0x14027a240
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x78], rbx
mov rax, qword [rsp + 0x68]
cvttss2si ecx, dword [rax + 0xf8]
mov rdx, qword [rsp + 0x78]
mov dword [rdx], ecx
lea rcx, [rsp + 0x154]
mov qword [rsp + 0x50], rcx
cvttss2si eax, dword [rax + 0xfc]
mov dword [rsp + 0xe4], eax
mov eax, 0xad438842
jmp 0x14027a240
cmp eax, 0xfe06b05
je 0x14027a8c3
cmp eax, 0x12edfc3d
je 0x14027a8e3
cmp eax, 0x1390383c
jne 0x14027a240
mov eax, 0x12edfc3d
jmp 0x14027a240
cmp eax, 0x9e2ef708
je 0x14027a906
cmp eax, 0x9e4bec3d
je 0x14027a910
cmp eax, 0xa0721962
jne 0x14027a240
mov rax, qword [rsp + 0xc0]
mov eax, dword [rax + 0x10]
mov dword [rsp + 0xe8], eax
mov eax, 0x9e4bec3d
jmp 0x14027a240
cmp eax, 0x6497fb1c
je 0x14027a92a
cmp eax, 0x77d8d39d
je 0x14027a936
cmp eax, 0x7a7aa300
jne 0x14027a240
cmp qword [rsp + 0x28], 0
mov eax, 0x4bd52f8
mov ecx, 0x6497fb1c
cmove eax, ecx
xor edi, edi
jmp 0x14027a240
cmp eax, 0xcdaa6781
je 0x14027a95d
cmp eax, 0xd01f9376
je 0x14027a96e
cmp eax, 0xd0d92d7f
jne 0x14027a240
cmp dword [rsp + 0xe0], 0
setne byte [rsp + 0x35]
mov eax, 0x1caa5931
jmp 0x14027a240
cmp eax, 0xe9681fb7
je 0x14027a99c
cmp eax, 0x4bd52f8
jne 0x14027a9d0
mov rax, qword [rsp + 0x28]
mov eax, dword [rax]
mov dword [rsp + 0xf4], eax
mov eax, 0xcdaa6781
jmp 0x14027a240
cmp eax, 0x809f320f
je 0x14027a9b6
cmp eax, 0x8815ad75
jne 0x14027a240
mov eax, dword [0x14035cf08]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9b21147
mov ecx, 0x419f67ab
jmp 0x14027a226
mov rcx, qword [rsp + 0x88]
mov rdx, rbx
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, 0x1390383c
jmp 0x14027a240
cmp byte [rsp + 0x35], 0
mov eax, 0x9388b4fe
cmovne eax, esi
mov r12b, 1
jmp 0x14027a240
mov eax, 0x98bf4acb
jmp 0x14027a240
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
mov eax, 0x9b767a2
mov ecx, 0x89deb47a
cmove eax, ecx
xor ebp, ebp
jmp 0x14027a240
mov rcx, r14
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov eax, 0x419f67ab
jmp 0x14027a240
mov rcx, qword [rsp + 0x38]
call fcn.1401cbe50
mov qword [rsp + 0x28], rax
mov eax, 0x7a7aa300
jmp 0x14027a240
mov rax, qword [rsp + 0x110]
mov rax, qword [rax]
mov qword [rsp + 0x100], rax
mov eax, 0xfe06b05
jmp 0x14027a240
cmp byte [rsp + 0x32], 0
mov eax, 0xf6eea082
mov ecx, 0xc5a3a973
cmovne eax, ecx
xor r13d, r13d
jmp 0x14027a240
cmp dword [rsp + 0xec], 0
mov eax, 0x3822ab43
mov ecx, 0x2eff38b1
cmove eax, ecx
jmp 0x14027a240
test r12b, 1
mov eax, 0xa1e39991
mov ecx, 0xd5236e0a
cmovne eax, ecx
jmp 0x14027a240
call fcn.14012fb50
mov qword [rsp + 0x68], rax
mov qword [rsp + 0xc8], r14
mov rax, qword [rsp + 0xc8]
mov eax, 0x8815ad75
jmp 0x14027a240
mov rax, qword [rsp + 0x68]
mov ecx, 0xcd
add rax, rcx
mov qword [rsp + 0x108], rax
mov eax, 0xaeccac69
jmp 0x14027a240
mov rax, qword [rsp + 0x108]
movzx eax, byte [rax]
mov byte [rsp + 0x37], al
mov eax, 0xb3c228cd
jmp 0x14027a240
mov eax, 0xf6eea082
mov r13d, ebp
jmp 0x14027a240
mov qword [rsp + 0x70], rbx
mov eax, 0xbd6a662d
jmp 0x14027a240
cmp byte [rsp + 0x32], 0
mov eax, 0xa1e39991
mov ecx, 0x6126407a
cmovne eax, ecx
jmp 0x14027a240
test byte [rsp + 0x36], 1
mov eax, 0x8d889911
mov ecx, 0xdea4875a
cmove eax, ecx
jmp 0x14027a240
mov rax, qword [rsp + 0x108]
movzx eax, byte [rax]
mov byte [rsp + 0x36], al
mov eax, 0x3482c670
jmp 0x14027a240
test byte [rsp + 0x37], 1
mov eax, 0xa1e39991
mov ecx, 0xa0721962
cmove eax, ecx
jmp 0x14027a240
mov rax, qword [rsp + 0x88]
cmp rax, qword [rsp + 0x100]
mov eax, 0x77d8d39d
cmove eax, esi
mov r12b, 1
jmp 0x14027a240
mov rax, qword [rsp + 0x50]
mov edx, dword [rax]
mov rax, qword [rsp + 0x78]
mov ecx, dword [rax]
call qword [sym.imp.USER32.dll_SetCursorPos]
mov rax, qword [rsp + 0x70]
mov eax, 0x9e2ef708
jmp 0x14027a240
mov eax, 0xdea4875a
jmp 0x14027a240
cmp dword [rsp + 0xe8], 0
mov eax, 0xa1e39991
mov ecx, 0x30312b43
cmove eax, ecx
jmp 0x14027a240
mov eax, 0x89deb47a
mov ebp, edi
jmp 0x14027a240
mov rcx, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_IsChild]
mov dword [rsp + 0xe0], eax
mov eax, 0xd0d92d7f
jmp 0x14027a240
mov eax, 0x6497fb1c
mov edi, dword [rsp + 0xf4]
jmp 0x14027a240
mov rax, qword [rsp + 0x40]
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [rax]
mov rcx, qword [rsp + 0x68]
movss xmm2, dword [rsp + 0xf0]
call fcn.140106210
mov rax, qword [rsp + 0x58]
mov eax, 0xa1e39991
jmp 0x14027a240
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x110], rax
mov eax, 0x954881b1
jmp 0x14027a240
cmp byte [rsp + 0x34], 0
mov eax, 0xc03b80f2
mov ecx, 0xe9681fb7
cmovne eax, ecx
xor r12d, r12d
jmp 0x14027a240
cmp eax, 0xf6eea082
jne 0x14027a240
mov rcx, qword [rsp + 0x68]
mov edx, r13d
call fcn.1401079e0
mov rax, qword [rsp + 0xc8]
mov ecx, 0x210
call fcn.1401b1b00
mov byte [rsp + 0x70], al
mov eax, 0x49992746
xor r13d, r13d
mov rdi, qword [sym.imp.USER32.dll_GetKeyState]
mov ebp, 0x2ef3759a
mov r12d, 0x2ad31bae
jmp 0x14027aa40
mov eax, dword [0x14035cf10]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc232033d
mov ecx, 0xc68564fd
cmove eax, ecx
cmp dword [0x14035cf14], 0xa
cmovl eax, ecx
cmp eax, 0xe1dcb866
jg 0x14027aaa0
cmp eax, 0xadb65137
jg 0x14027aaf0
cmp eax, 0x92285b7f
jle 0x14027ab98
cmp eax, 0x9882fe2a
jg 0x14027ac83
cmp eax, 0x92285b80
je 0x14027ad4e
cmp eax, 0x97d79caa
jne 0x14027aa40
mov eax, dword [0x14035cf10]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc232033d
cmove eax, ebp
cmp dword [0x14035cf14], 0xa
cmovl eax, ebp
jmp 0x14027aa40
cmp eax, 0x2ad31bad
jle 0x14027ab30
cmp eax, 0x39d59f3d
jle 0x14027abe8
cmp eax, 0x4f4df7cf
jg 0x14027acac
cmp eax, 0x39d59f3e
je 0x14027ad58
cmp eax, 0x49992746
jne 0x14027aa40
cmp byte [rsp + 0x70], 0
mov eax, 0xe1dcb867
mov ecx, 0xf1edc3a7
cmovne eax, ecx
jmp 0x14027aa40
cmp eax, 0xdc19f998
jg 0x14027ac13
cmp eax, 0xc68564fc
jg 0x14027acd9
cmp eax, 0xadb65138
je 0x14027ad88
cmp eax, 0xc232033d
jne 0x14027aa40
mov eax, 0x2ef3759a
jmp 0x14027aa40
cmp eax, 0xfe6524c7
jg 0x14027ac4b
cmp eax, 0xe1dcb867
je 0x14027ada0
cmp eax, 0xeca74cdc
je 0x14027adb8
cmp eax, 0xf1edc3a7
jne 0x14027aa40
mov ecx, 0x7b57e835
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ecx, 0x649a8e02
je 0x14027add2
cmp ecx, 0x7b57e835
jne 0x14027ab70
mov ecx, 0xa0
call rdi
movzx eax, ax
shr eax, 0xf
mov ecx, 0x649a8e02
jmp 0x14027ab70
cmp eax, 0x8e4d0ca0
je 0x14027adea
cmp eax, 0x8f804807
je 0x14027ae4e
cmp eax, 0x8fb3fc34
jne 0x14027aa40
mov ecx, 0x7b57e835
nop
cmp ecx, 0x649a8e02
je 0x14027ae88
cmp ecx, 0x7b57e835
jne 0x14027abc0
mov ecx, 0x5c
call rdi
movzx eax, ax
shr eax, 0xf
mov ecx, 0x649a8e02
jmp 0x14027abc0
cmp eax, 0x2ad31bae
je 0x14027aea0
cmp eax, 0x2ef3759a
je 0x14027aa1a
cmp eax, 0x2f0cdf4b
jne 0x14027aa40
mov eax, 0x2ad31bae
jmp 0x14027aa40
cmp eax, 0xdc19f999
je 0x14027aebb
cmp eax, 0xdf597528
je 0x14027aed2
cmp eax, 0xe118e5ca
jne 0x14027aa40
cmp byte [rsp + 0x48], 0
mov eax, 0x97d79caa
mov ecx, 0x8fb3fc34
cmovne eax, ecx
jmp 0x14027aa40
cmp eax, 0xfe6524c8
je 0x14027af3e
cmp eax, 0x23fad52e
je 0x14027af9e
cmp eax, 0x287a8759
jne 0x14027aa40
cmp byte [rsp + 0x50], 0
mov eax, 0x2ad31bae
mov ecx, 0x39d59f3e
cmovne eax, ecx
jmp 0x14027aa40
cmp eax, 0x9882fe2b
je 0x14027afb5
cmp eax, 0xad8acc63
jne 0x14027aa40
cmp byte [rsp + 0x58], 0
mov eax, 0xdf597528
cmovne eax, r12d
jmp 0x14027aa40
cmp eax, 0x4f4df7d0
je 0x14027afbf
cmp eax, 0x5da7c6f9
jne 0x14027aa40
cmp byte [rsp + 0x78], 0
mov eax, 0xfe6524c8
mov ecx, 0xe1dcb867
cmovne eax, ecx
jmp 0x14027aa40
cmp eax, 0xcd8d889a
jne 0x14027b021
call fcn.14012fb50
mov qword [rsp + 0x28], rax
mov eax, 0x8fbd2bb
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0xca102c5b
je 0x14027afc9
cmp eax, 0x8fbd2bb
jne 0x14027ad00
mov rcx, qword [rsp + 0x28]
mov edx, 0x212
xor r8d, r8d
call fcn.140105e80
mov rcx, qword [rsp + 0x28]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 0x212
mov r8d, 0x5b
mov r9d, 0xffffffff
call fcn.140105f60
mov eax, 0xca102c5b
jmp 0x14027ad00
mov eax, 0xadb65138
jmp 0x14027aa40
mov ecx, 0x7b57e835
nop dword [rax]
cmp ecx, 0x649a8e02
je 0x14027afd3
cmp ecx, 0x7b57e835
jne 0x14027ad60
mov ecx, 0xa1
call rdi
movzx eax, ax
shr eax, 0xf
mov ecx, 0x649a8e02
jmp 0x14027ad60
mov ecx, 0x216
call fcn.1401b1b00
mov byte [rsp + 0x48], al
mov eax, 0xe118e5ca
jmp 0x14027aa40
mov ecx, 0x214
call fcn.1401b1b00
mov byte [rsp + 0x50], al
mov eax, 0x287a8759
jmp 0x14027aa40
cmp byte [rsp + 0x90], 0
mov eax, 0xadb65138
mov ecx, 0x8f804807
cmovne eax, ecx
jmp 0x14027aa40
and al, 1
mov byte [rsp + 0x28], al
mov al, byte [rsp + 0x28]
mov byte [rsp + 0x78], al
mov eax, 0x5da7c6f9
jmp 0x14027aa40
call fcn.14012fb50
mov qword [rsp + 0x28], rax
mov eax, 0x8fbd2bb
nop dword [rax]
cmp eax, 0xca102c5b
je 0x14027afeb
cmp eax, 0x8fbd2bb
jne 0x14027ae00
mov rcx, qword [rsp + 0x28]
mov edx, 0x216
xor r8d, r8d
call fcn.140105e80
mov rcx, qword [rsp + 0x28]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 0x216
mov r8d, 0x5c
mov r9d, 0xffffffff
call fcn.140105f60
mov eax, 0xca102c5b
jmp 0x14027ae00
mov ecx, 0x7b57e835
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x649a8e02
je 0x14027aff5
cmp ecx, 0x7b57e835
jne 0x14027ae60
mov ecx, 0x5b
call rdi
movzx eax, ax
shr eax, 0xf
mov ecx, 0x649a8e02
jmp 0x14027ae60
and al, 1
mov byte [rsp + 0x28], al
mov al, byte [rsp + 0x28]
mov byte [rsp + 0x38], al
mov eax, 0x23fad52e
jmp 0x14027aa40
mov ecx, 0x212
call fcn.1401b1b00
mov byte [rsp + 0x90], al
mov eax, 0xeca74cdc
jmp 0x14027aa40
cmp byte [rsp + 0x40], 0
mov eax, 0xcd8d889a
mov ecx, 0xadb65138
cmovne eax, ecx
jmp 0x14027aa40
call fcn.14012fb50
mov qword [rsp + 0x28], rax
mov eax, 0x8fbd2bb
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp eax, 0xca102c5b
je 0x14027b00d
cmp eax, 0x8fbd2bb
jne 0x14027aef0
mov rcx, qword [rsp + 0x28]
mov edx, 0x214
xor r8d, r8d
call fcn.140105e80
mov rcx, qword [rsp + 0x28]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 0x214
mov r8d, 0xa1
mov r9d, 0xffffffff
call fcn.140105f60
mov eax, 0xca102c5b
jmp 0x14027aef0
call fcn.14012fb50
mov qword [rsp + 0x28], rax
mov eax, 0x8fbd2bb
nop dword [rax]
cmp eax, 0xca102c5b
je 0x14027b017
cmp eax, 0x8fbd2bb
jne 0x14027af50
mov rcx, qword [rsp + 0x28]
mov edx, 0x210
xor r8d, r8d
call fcn.140105e80
mov rcx, qword [rsp + 0x28]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 0x210
mov r8d, 0xa0
mov r9d, 0xffffffff
call fcn.140105f60
mov eax, 0xca102c5b
jmp 0x14027af50
cmp byte [rsp + 0x38], 0
mov eax, 0x8e4d0ca0
mov ecx, 0x97d79caa
cmovne eax, ecx
jmp 0x14027aa40
mov eax, 0x97d79caa
jmp 0x14027aa40
mov eax, 0xe1dcb867
jmp 0x14027aa40
mov eax, 0x92285b80
jmp 0x14027aa40
and al, 1
mov byte [rsp + 0x28], al
mov al, byte [rsp + 0x28]
mov byte [rsp + 0x58], al
mov eax, 0xad8acc63
jmp 0x14027aa40
mov eax, 0x9882fe2b
jmp 0x14027aa40
and al, 1
mov byte [rsp + 0x28], al
mov al, byte [rsp + 0x28]
mov byte [rsp + 0x40], al
mov eax, 0xdc19f999
jmp 0x14027aa40
mov eax, 0x2f0cdf4b
jmp 0x14027aa40
mov eax, 0x4f4df7d0
jmp 0x14027aa40
cmp eax, 0xc68564fd
jne 0x14027aa40
mov eax, 0x998633c3
jmp 0x140279dc0
mov rax, qword [rsp + 0xb8]
mov ecx, dword [rsp + 0x64]
mov dword [rax], ecx
mov eax, 0xf9f5adbe
jmp 0x140279dc0
mov eax, 0xdbddea76
mov ecx, dword [rsp + 0xdc]
mov dword [rsp + 0x9c], ecx
jmp 0x140279dc0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, ecx
lea rax, [rsp + 0x130]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
movss dword [rax], xmm1
movss dword [rsp + 0x134], xmm0
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xb0]
mov rcx, qword [rcx]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0xb0]
mov rax, qword [rsp + 0x80]
mov al, byte [rax + 0x30]
mov byte [rsp + 0x33], al
mov eax, 0xc56f1056
jmp 0x140279dc0
mov qword [rsp + 0x40], rdi
mov eax, 0xd21b205e
nop word cs:[rax + rax]
nop
cmp eax, 0x78798b1
je 0x14027b369
cmp eax, 0xd21b205e
jne 0x14027b0e0
call fcn.14012fba0
mov rbp, rax
lea r12, [rax + 0xb8]
add rbp, 0xbc
mov qword [rsp + 0x48], rbp
mov eax, 0x7a452a2
jmp 0x14027b120
mov qword [rsp + 0x38], r12
mov eax, 0x46cecc74
nop
cmp eax, 0x1805e8d8
jg 0x14027b150
cmp eax, 0xe551c84b
jg 0x14027b180
cmp eax, 0x89e8dff4
je 0x14027b1c5
cmp eax, 0xc308b8f7
jne 0x14027b120
mov eax, 0xe551c84c
jmp 0x14027b120
cmp eax, 0x5e327bd2
jle 0x14027b1a5
cmp eax, 0x5e327bd3
je 0x14027b1dc
cmp eax, 0x5f7594d6
jne 0x14027b120
mov edx, dword [rsp + 0x78]
mov rcx, r12
call fcn.140285a90
mov eax, 0xc308b8f7
jmp 0x14027b120
cmp eax, 0xe551c84c
je 0x14027b114
cmp eax, 0x7a452a2
jne 0x14027b120
mov rax, qword [rsp + 0x48]
cmp dword [rax], 0
sets byte [rsp + 0x70]
mov eax, 0x89e8dff4
jmp 0x14027b120
cmp eax, 0x46cecc74
jne 0x14027b340
mov rax, qword [rsp + 0x38]
mov dword [rax], 0
mov eax, 0x1805e8d9
jmp 0x14027b120
cmp byte [rsp + 0x70], 0
mov eax, 0xe551c84c
mov ecx, 0x5e327bd3
cmovne eax, ecx
jmp 0x14027b120
mov rdi, rbx
mov eax, dword [0x14035d050]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14035d054], 0xa
setl cl
or cl, al
mov ebx, 0xd62511b3
mov eax, 0x43c52560
cmovne ebx, eax
mov ecx, 0xd62511b3
mov eax, 0x7cc74179
cmovne ecx, eax
mov eax, 0xf517d2d1
jmp 0x14027b230
mov eax, 0x7cc74179
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x44fee887
jle 0x14027b270
cmp eax, 0x6e06ac94
jg 0x14027b290
cmp eax, 0x44fee888
je 0x14027b2cc
cmp eax, 0x621e2dd3
jne 0x14027b319
mov esi, dword [rsp + 0x50]
mov eax, esi
shr eax, 0x1f
add eax, esi
sar eax, 1
mov dword [rsp + 0x58], eax
mov eax, 0x6e06ac95
jmp 0x14027b230
cmp eax, 0xfcd545c7
jg 0x14027b2b0
cmp eax, 0xd62511b3
je 0x14027b21e
cmp eax, 0xf517d2d1
jne 0x14027b230
mov eax, ecx
jmp 0x14027b230
cmp eax, 0x6e06ac95
je 0x14027b2dd
cmp eax, 0x7cc74179
jne 0x14027b230
mov qword [rsp + 0x28], rbp
mov eax, ebx
jmp 0x14027b230
cmp eax, 0xfcd545c8
je 0x14027b2f6
cmp eax, 0x43c52560
jne 0x14027b230
mov eax, 0xfcd545c8
jmp 0x14027b230
mov eax, 0x61cb9b16
mov edx, dword [rsp + 0x90]
jmp 0x14027b230
mov eax, dword [rsp + 0x50]
add eax, dword [rsp + 0x58]
mov dword [rsp + 0x90], eax
mov eax, 0x44fee888
jmp 0x14027b230
mov rax, qword [rsp + 0x28]
mov eax, dword [rax]
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x50], 0
mov eax, 0x621e2dd3
cmove eax, r15d
mov edx, 8
jmp 0x14027b230
cmp eax, 0x61cb9b16
jne 0x14027b230
test edx, edx
cmovs edx, r13d
mov dword [rsp + 0x78], edx
mov eax, 0x5f7594d6
mov esi, 0xc03b80f2
mov rbx, rdi
jmp 0x14027b120
cmp eax, 0x1805e8d9
jne 0x14027b120
xor ecx, ecx
xor edx, edx
lea r8, [0x1402854d0]
xor r9d, r9d
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov eax, 0x78798b1
jmp 0x14027b0e0
mov rax, qword [rsp + 0x40]
mov byte [rax + 0x30], 0
mov eax, 0xfda071e8
jmp 0x140279dc0
cmp eax, 0xb55b44f4
jne 0x140279dc0
mov rax, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.1402e6030
nop
add rsp, 0x168
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret