Function at 0x140003ec0
Capabilities:
Log keystrokes via polling
Set console window title
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x120
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x14000a010]
xor rax, rsp
mov qword [rsp + 0x70], rax
lea rcx, str.Google_Chrome
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
lea rdx, [rsp + 0x58]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
movzx ecx, word [rsp + 0x66]
sub cx, word [rsp + 0x62]
inc cx
mov word [rsp + 0x30], cx
movzx ecx, word [rsp + 0x68]
sub cx, word [rsp + 0x64]
inc cx
mov word [rsp + 0x32], cx
mov rcx, rbx
mov edx, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rdi, rax
test rax, rax
je 0x140003fbc
mov edx, 0x190
mov dword [rsp + 0x28], 1
mov r9d, edx
mov dword [rsp + 0x20], 0x226
mov r8d, 0xc8
mov rcx, rax
call qword [sym.imp.USER32.dll_MoveWindow]
mov r9d, 2
mov r8b, 0xe8
mov edx, 0x3e8
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
lea rdx, [rsp + 0x50]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleCursorInfo]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x54], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorInfo]
mov edx, 0xfffffff0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, 0xfffffff0
mov rcx, rdi
and eax, 0xfffaffff
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongW]
call fcn.140002e50
movsd xmm10, qword [0x140007908]
lea rbx, [0x14000a050]
movsd xmm11, qword [0x1400078e8]
lea rsi, [0x14000a070]
movsd xmm12, qword [0x140007900]
lea rdi, [0x14000a0d0]
movsd xmm13, qword [0x1400078f0]
mov ebp, 0x8000
movsd xmm8, qword [0x140007928]
movabs r14, 0x6e6f73706d6f6854
movsd xmm7, qword [0x1400078f8]
mov r15d, 0x7838
movsd xmm14, qword [0x140007910]
xorps xmm9, xmm9
movsd xmm15, qword [0x140007918]
call fcn.140002dd0
cmp al, 1
jne 0x140004332
xor edi, edi
mov dword [rsp + 0x30], edi
call fcn.140002c40
test eax, eax
js 0x140004320
xor esi, esi
mov qword [rsp + 0x48], rsi
nop word [rax + rax]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bp, ax
je 0x140004302
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bp, ax
je 0x140004302
call fcn.140002b60
xorps xmm6, xmm6
mov ecx, edi
cvtsd2ss xmm6, xmm0
call fcn.140002850
mov ecx, edi
cvttsd2si ebx, xmm0
mov dword [rsp + 0x38], ebx
call fcn.140002540
cmp byte [0x14000a794], 1
cvttsd2si edx, xmm0
mov dword [rsp + 0x34], edx
jne 0x140004155
mov rax, qword [0x14000a8d8]
xor ecx, ecx
xor r9d, r9d
xor r14d, r14d
movsd xmm0, qword [rax + rsi]
cvtpd2ps xmm0, xmm0
cvttss2si ebp, xmm0
cmp ebp, 1
jl 0x1400042d6
jmp 0x140004242
cmp byte [0x14000a78a], 1
jne 0x14000416b
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm10
jmp 0x140004236
cmp byte [0x14000a799], 1
jne 0x140004181
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm11
jmp 0x140004236
cmp byte [0x14000a78f], 1
jne 0x140004197
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm12
jmp 0x140004236
cmp byte [0x14000a797], 1
jne 0x1400041ad
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm13
jmp 0x140004236
cmp byte [0x14000a796], 1
jne 0x1400041c0
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm8
jmp 0x140004236
cmp byte [0x14000a793], 1
je 0x14000422f
cmp byte [0x14000a78b], 1
jne 0x1400041dc
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm8
jmp 0x140004236
cmp byte [0x14000a791], 1
jne 0x1400041ef
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm14
jmp 0x140004236
cmp byte [0x14000a78e], 1
jne 0x140004202
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm15
jmp 0x140004236
cmp byte [0x14000a78c], 1
jne 0x140004219
movsd xmm0, qword [0x140007920]
cvtpd2ps xmm0, xmm0
jmp 0x140004236
cmp byte [0x14000a798], 1
je 0x14000422f
cmp byte [0x14000a78d], 1
jne 0x1400042ca
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm7
xor ecx, ecx
xor r9d, r9d
xor r14d, r14d
cvttss2si ebp, xmm0
mov eax, ebp
mov r15d, ebp
mov qword [rsp + 0x40], rax
mov r12d, ebx
mov r13d, edx
nop dword [rax]
nop word [rax + rax]
mov eax, r13d
mov qword [rsp + 0x20], 0
cdq
idiv ebp
mov esi, eax
mov eax, r12d
cdq
idiv ebp
mov edi, eax
mov eax, r15d
cdq
mov r8d, edi
idiv ebp
sub r8d, r9d
mov edx, esi
xor r9d, r9d
sub edx, ecx
mov ebx, eax
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, ebx
sub ecx, r14d
call fcn.1400022f0
add r13d, dword [rsp + 0x34]
add r15d, ebp
add r12d, dword [rsp + 0x38]
mov ecx, esi
sub qword [rsp + 0x40], 1
mov r9d, edi
mov r14d, ebx
jne 0x140004260
mov edi, dword [rsp + 0x30]
mov rsi, qword [rsp + 0x48]
jmp 0x1400042d6
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm9
cvttss2si ebp, xmm0
cvttss2si ecx, xmm6
sub ecx, ebp
call fcn.1400022f0
inc edi
add rsi, 8
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x48], rsi
call fcn.140002c40
mov ebp, 0x8000
cmp edi, eax
jle 0x1400040d0
lea rbx, [0x14000a050]
movabs r14, 0x6e6f73706d6f6854
lea rsi, [0x14000a070]
mov r15d, 0x7838
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdi, [0x14000a0d0]
mov ecx, 0x71
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x14000448f
call fcn.140002e50
mov rcx, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 0
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 0
cmp rcx, 1
jb 0x14000439c
cmp rcx, 0x10
mov qword [0x14000a060], 1
mov rax, rbx
cmovae rax, qword [0x14000a050]
mov word [rax], 0x2d
jmp 0x1400043b0
lea r9, [0x1400074d8]
mov edx, 1
mov rcx, rbx
call fcn.140005420
mov rcx, qword [0x14000a088]
mov byte [0x14000a796], 0
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 0
mov byte [0x14000a789], 0
mov byte [0x14000a790], 0
mov byte [0x14000a788], 0
mov byte [0x14000a795], 0
mov byte [0x14000a79a], 0
cmp rcx, 1
jb 0x140004439
cmp rcx, 0x10
mov qword [0x14000a080], 1
mov rax, rsi
cmovae rax, qword [0x14000a070]
mov word [rax], 0x2d
jmp 0x14000444d
lea r9, [0x1400074d8]
mov edx, 1
mov rcx, rsi
call fcn.140005420
mov rcx, qword [0x14000a0e8]
cmp rcx, 1
jb 0x14000447b
cmp rcx, 0x10
mov qword [0x14000a0e0], 1
mov rax, rdi
cmovae rax, qword [0x14000a0d0]
mov word [rax], 0x2d
jmp 0x14000448f
lea r9, [0x1400074d8]
mov edx, 1
mov rcx, rdi
call fcn.140005420
mov ecx, 0x72
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x14000454a
call fcn.140002e50
mov rcx, qword [0x14000a068]
mov byte [0x14000a794], 1
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 0
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 0
cmp rcx, 4
jb 0x1400044fe
mov qword [0x14000a060], 4
cmp rcx, 0x10
mov rax, rbx
cmovae rax, qword [0x14000a050]
mov dword [rax], 0x37344b41
mov byte [rax + 4], 0
jmp 0x140004512
lea r9, str.AK47
mov edx, 4
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 0
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 0
mov ecx, 0x73
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x140004618
call fcn.140002e50
mov rax, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 1
mov byte [0x14000a799], 0
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 0
cmp rax, 6
jb 0x1400045cc
cmp rax, 0x10
mov qword [0x14000a060], 6
mov r8d, 6
lea rdx, str.LR_300
cmovae rbx, qword [0x14000a050]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 6], 0
lea rbx, [0x14000a050]
jmp 0x1400045e0
lea r9, str.LR_300
mov edx, 6
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 0
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 0
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x1400046e6
call fcn.140002e50
mov rax, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 1
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 0
cmp rax, 3
jb 0x14000469a
cmp rax, 0x10
mov qword [0x14000a060], 3
mov r8d, 3
lea rdx, [0x14000761c]
cmovae rbx, qword [0x14000a050]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], 0
lea rbx, [0x14000a050]
jmp 0x1400046ae
lea r9, [0x14000761c]
mov edx, 3
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 0
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 0
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x1400047b4
call fcn.140002e50
mov rax, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 0
mov byte [0x14000a797], 1
mov byte [0x14000a78f], 0
cmp rax, 9
jb 0x140004768
cmp rax, 0x10
mov qword [0x14000a060], 9
mov r8d, 9
lea rdx, str.CustomSMG
cmovae rbx, qword [0x14000a050]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 9], 0
lea rbx, [0x14000a050]
jmp 0x14000477c
lea r9, str.CustomSMG
mov edx, 9
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 0
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 0
mov ecx, 0x76
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x14000486c
call fcn.140002e50
mov rcx, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 0
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 1
cmp rcx, 8
jb 0x140004820
mov qword [0x14000a060], 8
cmp rcx, 0x10
mov rax, rbx
cmovae rax, qword [0x14000a050]
mov qword [rax], r14
mov byte [rax + 8], 0
jmp 0x140004834
lea r9, str.Thompson
mov edx, 8
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 0
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 0
mov ecx, 0x77
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x140004927
call fcn.140002e50
mov rcx, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 0
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 0
cmp rcx, 4
jb 0x1400048db
mov qword [0x14000a060], 4
cmp rcx, 0x10
mov rax, rbx
cmovae rax, qword [0x14000a050]
mov dword [rax], 0x3934324d
mov byte [rax + 4], 0
jmp 0x1400048ef
lea r9, str.M249
mov edx, 4
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 0
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 1
mov byte [0x14000a78d], 0
mov ecx, 0x78
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x1400049f5
call fcn.140002e50
mov rax, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 0
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 0
cmp rax, 5
jb 0x1400049a9
cmp rax, 0x10
mov qword [0x14000a060], 5
mov r8d, 5
lea rdx, str.HMLMG
cmovae rbx, qword [0x14000a050]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 5], 0
lea rbx, [0x14000a050]
jmp 0x1400049bd
lea r9, str.HMLMG
mov edx, 5
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 0
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 1
mov ecx, 0x79
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x140004ac3
call fcn.140002e50
mov rax, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 0
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 0
cmp rax, 3
jb 0x140004a77
cmp rax, 0x10
mov qword [0x14000a060], 3
mov r8d, 3
lea rdx, [0x1400076b8]
cmovae rbx, qword [0x14000a050]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], 0
lea rbx, [0x14000a050]
jmp 0x140004a8b
lea r9, [0x1400076b8]
mov edx, 3
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 0
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 1
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 0
mov ecx, 0x7a
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x140004b91
call fcn.140002e50
mov rax, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 0
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 0
cmp rax, 3
jb 0x140004b45
cmp rax, 0x10
mov qword [0x14000a060], 3
mov r8d, 3
lea rdx, [0x1400076c0]
cmovae rbx, qword [0x14000a050]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], 0
lea rbx, [0x14000a050]
jmp 0x140004b59
lea r9, [0x1400076c0]
mov edx, 3
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 0
mov byte [0x14000a793], 1
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 0
mov ecx, 0x67
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x140004c5f
call fcn.140002e50
mov rax, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 0
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 0
cmp rax, 3
jb 0x140004c13
cmp rax, 0x10
mov qword [0x14000a060], 3
mov r8d, 3
lea rdx, [0x1400076c8]
cmovae rbx, qword [0x14000a050]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], 0
lea rbx, [0x14000a050]
jmp 0x140004c27
lea r9, [0x1400076c8]
mov edx, 3
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 0
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 1
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 0
mov ecx, 0x64
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x140004d2d
call fcn.140002e50
mov rax, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 0
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 0
cmp rax, 6
jb 0x140004ce1
cmp rax, 0x10
mov qword [0x14000a060], 6
mov r8d, 6
lea rdx, str.PYTHON
cmovae rbx, qword [0x14000a050]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 6], 0
lea rbx, [0x14000a050]
jmp 0x140004cf5
lea r9, str.PYTHON
mov edx, 6
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 0
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 1
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 0
mov ecx, 0x61
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x140004de3
mov rcx, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 0
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 0
cmp rcx, 4
jb 0x140004d97
mov qword [0x14000a060], 4
cmp rcx, 0x10
mov rax, rbx
cmovae rax, qword [0x14000a050]
mov dword [rax], 0x30353250
mov byte [rax + 4], 0
jmp 0x140004dab
lea r9, str.P250
mov edx, 4
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 0
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 1
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 0
mov ecx, 0x6f
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x140004e9e
call fcn.140002e50
mov rcx, qword [0x14000a068]
mov byte [0x14000a794], 0
mov byte [0x14000a78a], 0
mov byte [0x14000a799], 0
mov byte [0x14000a797], 0
mov byte [0x14000a78f], 0
cmp rcx, 4
jb 0x140004e52
mov qword [0x14000a060], 4
cmp rcx, 0x10
mov rax, rbx
cmovae rax, qword [0x14000a050]
mov dword [rax], 0x53415053
mov byte [rax + 4], 0
jmp 0x140004e66
lea r9, str.SPAS
mov edx, 4
mov rcx, rbx
call fcn.140005420
mov byte [0x14000a796], 1
mov byte [0x14000a793], 0
mov byte [0x14000a78b], 0
mov byte [0x14000a791], 0
mov byte [0x14000a78e], 0
mov byte [0x14000a78c], 0
mov byte [0x14000a798], 0
mov byte [0x14000a78d], 0
mov ecx, 0x60
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bp, ax
je 0x140004f11
call fcn.140002e50
mov rcx, qword [0x14000a0e8]
mov byte [0x14000a788], 0
mov byte [0x14000a790], 0
mov byte [0x14000a795], 0
mov byte [0x14000a79a], 0
cmp rcx, 1
jb 0x140004efd
cmp rcx, 0x10
mov qword [0x14000a0e0], 1
mov rax, rdi
cmovae rax, qword [0x14000a0d0]
mov word [rax], 0x2d
jmp 0x140004f11
lea r9, [0x1400074d8]
mov edx, 1
mov rcx, rdi
call fcn.140005420
mov ecx, 0x62
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bp, ax
je 0x140004f89
call fcn.140002e50
mov rcx, qword [0x14000a0e8]
mov byte [0x14000a790], 1
mov byte [0x14000a795], 0
mov byte [0x14000a79a], 0
mov byte [0x14000a788], 0
cmp rcx, 4
jb 0x140004f75
mov qword [0x14000a0e0], 4
cmp rcx, 0x10
mov rax, rdi
cmovae rax, qword [0x14000a0d0]
mov dword [rax], 0x6f6c6f48
mov byte [rax + 4], 0
jmp 0x140004f89
lea r9, str.Holo
mov edx, 4
mov rcx, rdi
call fcn.140005420
mov ecx, 0x68
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bp, ax
je 0x140004fff
call fcn.140002e50
mov rcx, qword [0x14000a0e8]
mov byte [0x14000a795], 1
mov byte [0x14000a79a], 0
mov byte [0x14000a790], 0
mov byte [0x14000a788], 0
cmp rcx, 2
jb 0x140004feb
mov qword [0x14000a0e0], 2
cmp rcx, 0x10
mov rax, rdi
cmovae rax, qword [0x14000a0d0]
mov word [rax], r15w
mov byte [rax + 2], 0
jmp 0x140004fff
lea r9, [0x140007854]
mov edx, 2
mov rcx, rdi
call fcn.140005420
mov ecx, 0x65
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bp, ax
je 0x140005086
call fcn.140002e50
mov rax, qword [0x14000a0e8]
mov byte [0x14000a79a], 1
mov byte [0x14000a788], 0
mov byte [0x14000a795], 0
mov byte [0x14000a790], 0
cmp rax, 3
jb 0x140005072
cmp rax, 0x10
mov qword [0x14000a0e0], 3
mov rbx, rdi
lea rdx, [0x140007858]
cmovae rbx, qword [0x14000a0d0]
mov r8d, 3
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], 0
jmp 0x140005086
lea r9, [0x140007858]
mov edx, 3
mov rcx, rdi
call fcn.140005420
mov ecx, 0x6e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bp, ax
je 0x1400050eb
call fcn.140002e50
mov rcx, qword [0x14000a088]
mov byte [0x14000a789], 0
mov byte [0x14000a792], 0
cmp rcx, 1
jb 0x1400050d7
cmp rcx, 0x10
mov qword [0x14000a080], 1
mov rax, rsi
cmovae rax, qword [0x14000a070]
mov word [rax], 0x2d
jmp 0x1400050eb
lea r9, [0x1400074d8]
mov edx, 1
mov rcx, rsi
call fcn.140005420
mov ecx, 0x69
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bp, ax
je 0x140005164
call fcn.140002e50
mov rax, qword [0x14000a088]
mov byte [0x14000a789], 1
mov byte [0x14000a792], 0
cmp rax, 9
jb 0x140005150
cmp rax, 0x10
mov qword [0x14000a080], 9
mov rbx, rsi
lea rdx, str.Supressor
cmovae rbx, qword [0x14000a070]
mov r8d, 9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 9], 0
jmp 0x140005164
lea r9, str.Supressor
mov edx, 9
mov rcx, rsi
call fcn.140005420
mov ecx, 0x66
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bp, ax
je 0x1400051dd
call fcn.140002e50
mov rax, qword [0x14000a088]
mov byte [0x14000a792], 1
mov byte [0x14000a789], 0
cmp rax, 0xb
jb 0x1400051c9
cmp rax, 0x10
mov qword [0x14000a080], 0xb
mov rbx, rsi
lea rdx, str.MuzzleBoost
cmovae rbx, qword [0x14000a070]
mov r8d, 0xb
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xb], 0
jmp 0x1400051dd
lea r9, str.MuzzleBoost
mov edx, 0xb
mov rcx, rsi
call fcn.140005420
mov ecx, 0x6a
call qword [sym.imp.USER32.dll_GetKeyState]
lea rbx, [0x14000a050]
test bp, ax
je 0x1400040a3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3