Function at 0x1400c9d66
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x288
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x200], 0xfffffffffffffffe
mov rdi, rdx
sub rsp, 0x20
lea rsi, [rbp + 0xa8]
mov rcx, rsi
mov rdx, r9
call fcn.1400cb1fc
add rsp, 0x20
sub rsp, 0x20
lea rdx, [rbp + 0xf8]
mov rcx, rsi
call fcn.1400cb556
add rsp, 0x20
lea rax, [rbp + 0xe8]
mov qword [rbp + 0x110], rax
mov eax, 0x8837bd60
cmp eax, 0xe1a401b0
je 0x1400c9df7
cmp eax, 0x8837bd60
jne 0x1400c9dd3
mov rax, qword [rbp + 0x110]
mov eax, dword [rax]
mov dword [rbp + 0x190], eax
mov eax, 0xe1a401b0
jmp 0x1400c9dd3
mov eax, dword [rbp + 0x190]
lea rax, [rbp + 0xec]
mov qword [rbp + 0x110], rax
mov eax, 0x99c02077
cmp eax, 0x64d05bab
je 0x1400c9e34
cmp eax, 0x99c02077
jne 0x1400c9e10
mov rax, qword [rbp + 0x110]
mov eax, dword [rax]
mov dword [rbp + 0x190], eax
mov eax, 0x64d05bab
jmp 0x1400c9e10
mov r12d, dword [rbp + 0x190]
mov ecx, 0xf84546b9
mov rax, qword [rbp + 0xb0]
cmp ecx, 0xf84546b9
je 0x1400c9e59
cmp ecx, 0x15cfd88
jne 0x1400c9e47
jmp 0x1400c9e60
mov ecx, 0x15cfd88
jmp 0x1400c9e47
mov qword [rbp + 0xf0], rdi
mov qword [rbp + 0x110], rax
mov r13, qword [rbp + 0x110]
mov eax, dword [0x140400838]
mov ecx, dword [0x14040083c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1d0]
mov eax, 0x238844a5
mov edi, 0x82eb8e15
cmove edi, eax
cmp ecx, 0xa
setl byte [rbp + 0x1d8]
cmovl edi, eax
mov eax, 0xb7cf4c9c
mov ecx, 0x83e1caf
movabs rsi, 0xb9c3c360a87fc85c
cmp eax, 0x83e1cae
jg 0x1400c9edd
cmp eax, 0x82eb8e15
je 0x1400c9f0a
cmp eax, 0xb7cf4c9c
je 0x1400c9f11
cmp eax, 0xe1163365
jne 0x1400c9ebf
jmp 0x1400c9f38
cmp eax, 0x83e1caf
je 0x1400c9f2d
cmp eax, 0x238844a5
je 0x1400c9f31
cmp eax, 0x6e063afa
jne 0x1400c9ebf
mov rax, rsi
mov qword [rbp + 0x110], rax
mov rbx, qword [rbp + 0x110]
mov eax, 0xe1163365
jmp 0x1400c9ebf
mov eax, 0x83e1caf
jmp 0x1400c9ebf
mov dl, byte [rbp + 0x1d0]
cmp byte [rbp + 0x1d8], 0
mov eax, 0x82eb8e15
cmovne eax, ecx
test dl, dl
cmovne eax, ecx
jmp 0x1400c9ebf
mov eax, edi
jmp 0x1400c9ebf
mov eax, 0x6e063afa
jmp 0x1400c9ebf
lea r14, [rbp + 0x190]
mov qword [rbp + 0x1f0], r14
mov qword [rbp + 0x1e0], rbx
mov rax, qword [rbp + 0x1f0]
mov rcx, qword [rbp + 0x1e0]
mov qword [rax], rcx
mov rax, qword [rbp + 0x1f0]
movabs rdi, 0x7c36151995056ba4
mov qword [rbp + 0x110], rdi
mov rcx, qword [rbp + 0x110]
mov qword [rax + 8], rcx
mov eax, dword [0x140400630]
mov ecx, dword [0x140400634]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1ff]
cmp ecx, 0xa
setl byte [rbp + 0x1fe]
mov rdx, rsp
mov eax, 0xe28a5321
mov r8d, 0xc47d33f6
mov r9d, 0xcb512094
mov r10d, 0x3f597b63
movabs rbx, 0xb9c3c360a80ca43f
mov r11d, 0x72fb6b94
cmp eax, 0x3f597b62
jg 0x1400ca00f
cmp eax, 0xa03c5695
je 0x1400ca02f
cmp eax, 0xb689a006
je 0x1400ca25b
cmp eax, 0xe28a5321
jne 0x1400c9fd1
mov cl, byte [rbp + 0x1ff]
cmp byte [rbp + 0x1fe], 0
mov eax, 0x488c6375
cmovne eax, r10d
test cl, cl
cmovne eax, r10d
jmp 0x1400c9fd1
cmp eax, 0x3f597b63
je 0x1400ca064
cmp eax, 0x488c6375
je 0x1400ca0e5
cmp eax, 0x72fb6b94
jne 0x1400c9fd1
mov eax, 0xa03c5695
jmp 0x1400c9fd1
mov rax, qword [rbp + 0x1f0]
mov qword [rbp + 0x1e0], rax
mov ecx, 0xfc45f11b
cmp ecx, 0x12ccb869
je 0x1400ca133
cmp ecx, 0xfc45f11b
jne 0x1400ca042
mov rax, qword [rbp + 0x1e0]
mov ecx, 0x12ccb869
jmp 0x1400ca042
mov eax, reloc.WS2_32.dll_recv
call fcn.1401e5ba0
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x1d8], rax
mov rcx, qword [rbp + 0x1d8]
mov rcx, rbx
mov qword [rbp + 0x110], rcx
mov rcx, qword [rbp + 0x110]
mov qword [rax], rcx
mov qword [rbp + 0x110], rdi
mov rcx, qword [rbp + 0x110]
mov qword [rax + 8], rcx
mov qword [rbp + 0x110], rax
mov rax, qword [rbp + 0x110]
mov qword [rbp + 0x1f0], rax
mov eax, dword [0x140400630]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x488c6375
cmove eax, r11d
cmp dword [0x140400634], 0xa
cmovl eax, r11d
jmp 0x1400c9fd1
mov eax, reloc.WS2_32.dll_recv
call fcn.1401e5ba0
sub rsp, rax
mov rax, rsp
mov rcx, rbx
mov qword [rbp + 0x110], rcx
mov rcx, qword [rbp + 0x110]
mov qword [rax], rcx
mov qword [rbp + 0x110], rdi
mov rcx, qword [rbp + 0x110]
mov qword [rax + 8], rcx
mov qword [rbp + 0x110], rax
mov rax, qword [rbp + 0x110]
mov eax, 0x3f597b63
jmp 0x1400c9fd1
mov qword [rbp + 0x110], rax
mov rax, qword [rbp + 0x110]
movups xmm0, xmmword [rax]
mov qword [rbp + 0x1e0], r14
mov ecx, 0xfc45f11b
cmp ecx, 0x12ccb869
je 0x1400ca16e
cmp ecx, 0xfc45f11b
jne 0x1400ca150
mov rax, qword [rbp + 0x1e0]
mov ecx, 0x12ccb869
jmp 0x1400ca150
mov qword [rbp + 0x110], rax
mov rax, qword [rbp + 0x110]
movups xmm1, xmmword [rax]
xorps xmm1, xmm0
movaps xmmword [rbp + 0x110], xmm1
movaps xmm0, xmmword [rbp + 0x110]
mov eax, dword [0x140400458]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete byte [rbp + 0x1c8]
mov eax, dword [0x14040045c]
mov ecx, 0x85aba8b1
cmove ecx, r8d
cmp eax, 0xa
setl byte [rbp + 0x1d0]
cmovl ecx, r8d
mov eax, 0x7d05f61c
cmp eax, 0x6a190c9
jg 0x1400ca1ef
cmp eax, 0x85aba8b1
je 0x1400ca224
cmp eax, 0xc47d33f6
je 0x1400ca22b
cmp eax, 0xcb512094
jne 0x1400ca1c8
mov qword [rbp + 0x1e0], r14
mov eax, ecx
jmp 0x1400ca1c8
cmp eax, 0x6a190ca
je 0x1400ca232
cmp eax, 0x62007287
je 0x1400ca240
cmp eax, 0x7d05f61c
jne 0x1400ca1c8
mov r15b, byte [rbp + 0x1c8]
cmp byte [rbp + 0x1d0], 0
mov eax, 0x85aba8b1
cmovne eax, r9d
test r15b, r15b
cmovne eax, r9d
jmp 0x1400ca1c8
mov eax, 0xcb512094
jmp 0x1400ca1c8
mov eax, 0x6a190ca
jmp 0x1400ca1c8
mov rsi, qword [rbp + 0x1e0]
mov eax, 0x62007287
jmp 0x1400ca1c8
mov qword [rbp + 0x110], rsi
mov rax, qword [rbp + 0x110]
movups xmmword [rax], xmm0
mov eax, 0xb689a006
jmp 0x1400c9fd1
mov qword [rbp + 0x110], r14
mov rax, qword [rbp + 0x1d8]
mov rcx, qword [rbp + 0x110]
mov rsp, rdx
sub rsp, 0x20
call fcn.140326b7c
add rsp, 0x20
mov qword [rbp + 0x1d8], r14
movabs rax, 0xfb918630f1448464
mov qword [rbp + 0x110], rax
mov rax, qword [rbp + 0x110]
mov qword [rbp + 0x1f0], rax
mov eax, 0x67a45970
movabs r8, 0x29653544b54025eb
movabs rcx, 0x7d45f6adccb3e2c2
mov r9d, 0x13506dbc
mov esi, 0x57ce17de
cmp eax, 0x4dc71649
jle 0x1400ca30d
cmp eax, 0x4dc7164a
je 0x1400ca326
cmp eax, 0x57ce17de
je 0x1400ca372
cmp eax, 0x67a45970
jne 0x1400ca2ca
mov eax, dword [0x140400840]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
mov eax, 0x4dc7164a
cmove eax, esi
cmp dword [0x140400844], 0xa
cmovl eax, esi
jmp 0x1400ca2ca
cmp eax, 0xaaa72934
je 0x1400ca3e7
cmp eax, 0x13506dbc
jne 0x1400ca2ca
mov eax, 0xaaa72934
jmp 0x1400ca2ca
mov rax, qword [rbp + 0x1d8]
mov rdx, qword [rbp + 0x1f0]
mov qword [rax], rdx
mov rax, qword [rbp + 0x1d8]
mov rdx, r8
mov qword [rbp + 0x110], rdx
mov rdx, qword [rbp + 0x110]
mov qword [rax + 8], rdx
mov rdx, rcx
mov qword [rbp + 0x110], rdx
mov rdx, qword [rbp + 0x110]
mov qword [rax + 0x10], rdx
mov eax, 0x57ce17de
jmp 0x1400ca2ca
mov rax, qword [rbp + 0x1d8]
mov rdx, qword [rbp + 0x1f0]
mov qword [rax], rdx
mov rax, qword [rbp + 0x1d8]
mov rdx, r8
mov qword [rbp + 0x110], rdx
mov rdx, qword [rbp + 0x110]
mov qword [rax + 8], rdx
mov rdx, rcx
mov qword [rbp + 0x110], rdx
mov rdx, qword [rbp + 0x110]
mov qword [rax + 0x10], rdx
add rax, 0x18
mov qword [rbp + 0x1e0], rax
mov eax, dword [0x140400840]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
mov eax, 0x4dc7164a
cmove eax, r9d
cmp dword [0x140400844], 0xa
cmovl eax, r9d
jmp 0x1400ca2ca
movabs rax, 0xac489897caa5711c
lea rcx, [rbp + 0x110]
mov qword [rcx], rax
mov rax, qword [rcx]
mov rdx, qword [rbp + 0x1e0]
mov qword [rdx], rax
mov rax, qword [rbp + 0x1e0]
movabs rdx, 0xb038827d5cea5d95
mov qword [rcx], rdx
mov rdx, qword [rcx]
mov qword [rax + 8], rdx
movabs rdx, 0x2a0a79e3303dd59b
mov qword [rcx], rdx
mov rdx, qword [rcx]
mov qword [rax + 0x10], rdx
mov qword [rbp + 0x1c8], rcx
mov rax, qword [rbp + 0x1c8]
mov qword [rbp + 0x1d0], rcx
mov qword [rbp + 0x1e0], rbx
mov rax, qword [rbp + 0x1e0]
mov rcx, qword [rbp + 0x1d0]
mov qword [rcx], rax
mov rax, qword [rbp + 0x1d0]
add rax, 8
mov qword [rbp + 0x1d8], rax
mov eax, 0xa6ab9bdb
cmp eax, 0xe50ec0fd
je 0x1400ca4a8
cmp eax, 0xa6ab9bdb
jne 0x1400ca47b
mov qword [rbp + 0x1e0], rdi
mov rax, qword [rbp + 0x1e0]
mov rcx, qword [rbp + 0x1d8]
mov qword [rcx], rax
mov eax, 0xe50ec0fd
jmp 0x1400ca47b
mov rax, qword [rbp + 0x1d8]
movabs rcx, 0x2d65d7fe9ff6a181
mov qword [rbp + 0x1e0], rcx
mov rcx, qword [rbp + 0x1e0]
mov qword [rax + 8], rcx
movabs rcx, 0x8c7adeb799f6344e
mov qword [rbp + 0x1e0], rcx
mov rcx, qword [rbp + 0x1e0]
mov qword [rax + 0x10], rcx
movabs rcx, 0xf572cc347cb812d3
mov qword [rbp + 0x1e0], rcx
mov rcx, qword [rbp + 0x1e0]
mov qword [rax + 0x18], rcx
movabs rcx, 0x2a0a73ad7f7481d8
mov qword [rbp + 0x1e0], rcx
mov rcx, qword [rbp + 0x1e0]
mov qword [rax + 0x20], rcx
mov rax, qword [rbp + 0x1d0]
mov qword [rbp + 0x1e0], rax
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x1f0], rax
mov edx, 0xfc45f11b
cmp edx, 0x12ccb869
je 0x1400ca55e
cmp edx, 0xfc45f11b
jne 0x1400ca540
mov rcx, qword [rbp + 0x1f0]
mov edx, 0x12ccb869
jmp 0x1400ca540
mov qword [rbp + 0x1e0], rcx
mov rcx, qword [rbp + 0x1e0]
movups xmm0, xmmword [rcx]
mov qword [rbp + 0x1f0], r14
mov edx, 0xfc45f11b
cmp edx, 0x12ccb869
je 0x1400ca599
cmp edx, 0xfc45f11b
jne 0x1400ca57b
mov rcx, qword [rbp + 0x1f0]
mov edx, 0x12ccb869
jmp 0x1400ca57b
mov qword [rbp + 0x1e0], rcx
mov rcx, qword [rbp + 0x1e0]
movups xmm1, xmmword [rcx]
xorps xmm1, xmm0
movaps xmmword [rbp + 0x1e0], xmm1
movaps xmm0, xmmword [rbp + 0x1e0]
mov ecx, dword [0x140400458]
mov edx, dword [0x14040045c]
lea ebx, [rcx - 1]
imul ebx, ecx
test bl, 1
sete byte [rbp + 0x1ff]
mov ecx, 0xc47d33f6
mov edi, 0x85aba8b1
cmove edi, ecx
cmp edx, 0xa
setl byte [rbp + 0x1fe]
cmovl edi, ecx
mov ecx, 0x7d05f61c
mov esi, 0xcb512094
cmp ecx, 0x6a190c9
jg 0x1400ca626
cmp ecx, 0x85aba8b1
je 0x1400ca65a
cmp ecx, 0xc47d33f6
je 0x1400ca661
cmp ecx, 0xcb512094
jne 0x1400ca5fb
mov qword [rbp + 0x1f0], r14
mov ecx, edi
jmp 0x1400ca5fb
cmp ecx, 0x6a190ca
je 0x1400ca668
cmp ecx, 0x62007287
je 0x1400ca676
cmp ecx, 0x7d05f61c
jne 0x1400ca5fb
mov dl, byte [rbp + 0x1ff]
cmp byte [rbp + 0x1fe], 0
mov ecx, 0x85aba8b1
cmovne ecx, esi
test dl, dl
cmovne ecx, esi
jmp 0x1400ca5fb
mov ecx, 0xcb512094
jmp 0x1400ca5fb
mov ecx, 0x6a190ca
jmp 0x1400ca5fb
mov rbx, qword [rbp + 0x1f0]
mov ecx, 0x62007287
jmp 0x1400ca5fb
mov qword [rbp + 0x1e0], rbx
mov rcx, qword [rbp + 0x1e0]
movups xmmword [rcx], xmm0
lea rcx, [rax + 0x10]
mov qword [rbp + 0x1f0], rcx
mov edx, 0xfc45f11b
cmp edx, 0x12ccb869
je 0x1400ca6b5
cmp edx, 0xfc45f11b
jne 0x1400ca697
mov rcx, qword [rbp + 0x1f0]
mov edx, 0x12ccb869
jmp 0x1400ca697
mov qword [rbp + 0x1e0], rcx
mov rcx, qword [rbp + 0x1e0]
movups xmm0, xmmword [rcx]
lea r8, [rbp + 0x1a0]
mov qword [rbp + 0x1f0], r8
mov ebx, 0xfc45f11b
cmp ebx, 0x12ccb869
je 0x1400ca6f7
cmp ebx, 0xfc45f11b
jne 0x1400ca6d9
mov rdx, qword [rbp + 0x1f0]
mov ebx, 0x12ccb869
jmp 0x1400ca6d9
mov qword [rbp + 0x1e0], rdx
mov rdx, qword [rbp + 0x1e0]
movups xmm1, xmmword [rdx]
xorps xmm1, xmm0
movaps xmmword [rbp + 0x1e0], xmm1
movaps xmm0, xmmword [rbp + 0x1e0]
mov edx, dword [0x140400458]
mov ebx, dword [0x14040045c]
lea edi, [rdx - 1]
imul edi, edx
test dil, 1
sete byte [rbp + 0x1ff]
mov edx, 0xc47d33f6
mov esi, 0x85aba8b1
cmove esi, edx
cmp ebx, 0xa
setl byte [rbp + 0x1fe]
cmovl esi, edx
mov edx, 0x7d05f61c
mov ebx, 0xcb512094
cmp edx, 0x6a190c9
jg 0x1400ca785
cmp edx, 0x85aba8b1
je 0x1400ca7b9
cmp edx, 0xc47d33f6
je 0x1400ca7c0
cmp edx, 0xcb512094
jne 0x1400ca75a
mov qword [rbp + 0x1f0], r8
mov edx, esi
jmp 0x1400ca75a
cmp edx, 0x6a190ca
je 0x1400ca7c7
cmp edx, 0x62007287
je 0x1400ca7d5
cmp edx, 0x7d05f61c
jne 0x1400ca75a
mov cl, byte [rbp + 0x1ff]
cmp byte [rbp + 0x1fe], 0
mov edx, 0x85aba8b1
cmovne edx, ebx
test cl, cl
cmovne edx, ebx
jmp 0x1400ca75a
mov edx, 0xcb512094
jmp 0x1400ca75a
mov edx, 0x6a190ca
jmp 0x1400ca75a
mov rdi, qword [rbp + 0x1f0]
mov edx, 0x62007287
jmp 0x1400ca75a
mov qword [rbp + 0x1e0], rdi
mov rcx, qword [rbp + 0x1e0]
movups xmmword [rcx], xmm0
add rax, 0x20
mov qword [rbp + 0x1f0], rax
mov ecx, 0xfc45f11b
cmp ecx, 0x12ccb869
je 0x1400ca814
cmp ecx, 0xfc45f11b
jne 0x1400ca7f6
mov rax, qword [rbp + 0x1f0]
mov ecx, 0x12ccb869
jmp 0x1400ca7f6
mov qword [rbp + 0x1e0], rax
mov rax, qword [rbp + 0x1e0]
movups xmm0, xmmword [rax]
lea rsi, [rbp + 0x1b0]
mov qword [rbp + 0x1f0], rsi
mov edx, 0xfc45f11b
cmp edx, 0x12ccb869
je 0x1400ca856
cmp edx, 0xfc45f11b
jne 0x1400ca838
mov rcx, qword [rbp + 0x1f0]
mov edx, 0x12ccb869
jmp 0x1400ca838
mov qword [rbp + 0x1e0], rcx
mov rcx, qword [rbp + 0x1e0]
movups xmm1, xmmword [rcx]
xorps xmm1, xmm0
movaps xmmword [rbp + 0x1e0], xmm1
movaps xmm0, xmmword [rbp + 0x1e0]
mov ecx, dword [0x140400458]
mov edx, dword [0x14040045c]
lea ebx, [rcx - 1]
imul ebx, ecx
test bl, 1
sete byte [rbp + 0x1ff]
mov ecx, 0xc47d33f6
mov edi, 0x85aba8b1
cmove edi, ecx
cmp edx, 0xa
setl byte [rbp + 0x1fe]
cmovl edi, ecx
mov ecx, 0x7d05f61c
mov edx, 0xcb512094
cmp ecx, 0x6a190c9
jg 0x1400ca8e3
cmp ecx, 0x85aba8b1
je 0x1400ca917
cmp ecx, 0xc47d33f6
je 0x1400ca91e
cmp ecx, 0xcb512094
jne 0x1400ca8b8
mov qword [rbp + 0x1f0], rsi
mov ecx, edi
jmp 0x1400ca8b8
cmp ecx, 0x6a190ca
je 0x1400ca925
cmp ecx, 0x62007287
je 0x1400ca933
cmp ecx, 0x7d05f61c
jne 0x1400ca8b8
mov al, byte [rbp + 0x1ff]
cmp byte [rbp + 0x1fe], 0
mov ecx, 0x85aba8b1
cmovne ecx, edx
test al, al
cmovne ecx, edx
jmp 0x1400ca8b8
mov ecx, 0xcb512094
jmp 0x1400ca8b8
mov ecx, 0x6a190ca
jmp 0x1400ca8b8
mov rbx, qword [rbp + 0x1f0]
mov ecx, 0x62007287
jmp 0x1400ca8b8
mov qword [rbp + 0x1e0], rbx
mov rax, qword [rbp + 0x1e0]
movups xmmword [rax], xmm0
mov rax, qword [rbp + 0x1c8]
sub rsp, 0x20
lea rcx, [rbp + 0x190]
call fcn.140020734
add rsp, 0x20
cmp byte [0x1404002f0], 0
jne 0x1400ca995
mov rsi, qword [sym.imp.USER32.dll_GetAsyncKeyState]
sub rsp, 0x20
mov ecx, WSACleanup
call rsi
add rsp, 0x20
mov cl, byte [0x1404002f0]
test al, 1
je 0x1400ca991
xor cl, 1
mov byte [0x1404002f0], cl
test cl, cl
je 0x1400ca96f
lea rsi, str.QRUVSWAPAQARASATAUAVAWH
lea rax, [rbp + 0x110]
mov ecx, recv
mov rdi, rax
rep movsq qword [rdi], qword [rsi]
mov byte [rax + 0x72], 0
mov word [rax + 0x70], 0xc3c0
sub rsp, 0x20
lea rcx, [0x1403fc2a8]
call fcn.1400c1a56
add rsp, 0x20
sub rsp, 0x20
mov edx, reloc.WS2_32.dll_WSAStartup
mov rcx, rax
mov r8d, 0x3000
mov r9d, 0x40
call fcn.14003bf90
add rsp, 0x20
mov qword [rbp + 0x1d0], rax
test rax, rax
je 0x1400caed3
sub rsp, 0x20
lea rcx, [0x1403fc2a8]
call fcn.1400c1a56
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
lea rdx, str.user32.dll
lea rcx, [rbp + 0x88]
call fcn.140062a3a
add rsp, 0x20
sub rsp, 0x20
lea rdx, [rbp + 0x88]
mov rcx, rsi
call fcn.14003be14
add rsp, 0x20
mov rsi, rax
sub rsp, 0x30
mov dword [rsp + 0x20], 1
lea rdx, str.C:WindowsSystem32_blrrd.txt
lea rcx, [rbp - 0x80]
mov r8d, 2
mov r9d, 0x40
call fcn.140055fb6
add rsp, 0x30
sub rsp, 0x20
lea rcx, [rbp - 0x80]
call fcn.140056726
add rsp, 0x20
test rsi, rsi
je 0x1400caed3
sub rsp, 0x20
mov rcx, rsi
call fcn.1400c908b
add rsp, 0x20
test al, al
je 0x1400caed3
sub rsp, 0x20
lea rdx, str.NtUserGetForegroundWindow
lea rcx, [rbp + 0x190]
call fcn.14001c7ea
add rsp, 0x20
sub rsp, 0x20
lea rcx, [0x1404002e0]
lea rdx, [rbp + 0x190]
call fcn.1400cb746
add rsp, 0x20
mov rsi, qword [rax]
sub rsp, 0x20
lea rdi, [rbp + 0x190]
mov rcx, rdi
call fcn.14001a9a4
add rsp, 0x20
mov qword [rbp + 0x1f0], rdi
mov eax, 0xce179ba3
cmp eax, 0x2524b66c
je 0x1400cab54
cmp eax, 0xce179ba3
jne 0x1400cab03
mov rax, qword [rbp + 0x1f0]
mov qword [rbp + 0x1e0], rax
mov eax, 0x311c8204
cmp eax, 0x17beab34
je 0x1400cab4d
cmp eax, 0x311c8204
jne 0x1400cab24
mov rcx, qword [rbp + 0x1e0]
sub rsp, 0x20
call fcn.14008a384
add rsp, 0x20
mov eax, 0x17beab34
jmp 0x1400cab24
mov eax, 0x2524b66c
jmp 0x1400cab03
test rsi, rsi
je 0x1400caed3
sub rsp, 0x20
lea rcx, [0x1403fc2a8]
call fcn.1400c1a56
add rsp, 0x20
mov edi, 0x38085bd3
lea r8, [rbp + 0x1d8]
mov edx, 0x1160589f
mov ebx, 0x2f7d3239
cmp edi, 0x38085bd2
jle 0x1400cabd2
cmp edi, 0x7927d331
je 0x1400cac22
cmp edi, 0x65c3348c
je 0x1400cac41
cmp edi, 0x38085bd3
jne 0x1400cab87
mov edi, dword [0x140400848]
lea ecx, [rdi - 1]
imul ecx, edi
test cl, 1
mov edi, 0x7927d331
cmove edi, ebx
cmp dword [0x14040084c], 0xa
cmovl edi, ebx
jmp 0x1400cab87
cmp edi, 0x1160589f
je 0x1400cac37
cmp edi, 0x2f7d3239
jne 0x1400cab87
mov qword [rbp + 0x190], r8
mov rcx, qword [rbp + 0x190]
mov qword [rbp + 0x1d8], 0
mov ecx, dword [0x140400848]
lea edi, [rcx - 1]
imul edi, ecx
test dil, 1
mov edi, 0x7927d331
cmove edi, edx
cmp dword [0x14040084c], 0xa
cmovl edi, edx
jmp 0x1400cab87
mov qword [rbp + 0x1d8], 0
mov edi, 0x2f7d3239
jmp 0x1400cab87
mov edi, 0x65c3348c
jmp 0x1400cab87
mov r8, qword [rbp + 0x190]
sub rsp, 0x20
mov r9d, 8
mov rcx, rax
mov rdx, rsi
call fcn.14003b818
add rsp, 0x20
mov rax, qword [rbp + 0x1d8]
mov rcx, qword [rbp + 0x190]
mov qword [rbp + 0x128], rsi
mov qword [rbp + 0x132], rax
sub rsp, 0x20
lea rcx, [0x1403fc2a8]
call fcn.1400c1a56
add rsp, 0x20
mov rcx, qword [rbp + 0x100]
mov qword [rbp + 0x1f0], rcx
lea rbx, [rbp + 0xf8]
mov qword [rbp + 0x1e0], rbx
mov ecx, 0x52fe26aa
cmp ecx, 0x3e230666
je 0x1400cace1
cmp ecx, 0x52fe26aa
jne 0x1400cacb2
mov rcx, qword [rbp + 0x1e0]
mov rdx, qword [rbp + 0x1f0]
sub rdx, qword [rcx]
mov qword [rbp + 0x190], rdx
mov ecx, 0x3e230666
jmp 0x1400cacb2
mov r9, qword [rbp + 0x190]
mov qword [rbp + 0x1f0], rbx
mov ecx, dword [0x1404006c0]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1404006c4], 0xa
setl dl
or dl, cl
mov ebx, 0x12e03938
mov ecx, 0xfd210da5
cmove ebx, ecx
mov edx, 0x32d9a758
cmove edx, ecx
mov ecx, 0x97591e9c
cmp ecx, 0x12e03937
jle 0x1400cad5c
cmp ecx, 0x12e03938
je 0x1400cad93
cmp ecx, 0x2140202c
je 0x1400cad7a
cmp ecx, 0x32d9a758
jne 0x1400cad27
mov rcx, qword [rbp + 0x1e0]
mov rcx, qword [rcx]
mov qword [rbp + 0x190], rcx
mov ecx, ebx
jmp 0x1400cad27
cmp ecx, 0x97591e9c
je 0x1400cad7e
cmp ecx, 0xfd210da5
jne 0x1400cad27
mov rcx, qword [rbp + 0x1e0]
mov ecx, 0x32d9a758
jmp 0x1400cad27
mov ecx, edx
jmp 0x1400cad27
mov rcx, qword [rbp + 0x1f0]
mov qword [rbp + 0x1e0], rcx
mov ecx, 0x2140202c
jmp 0x1400cad27
mov r8, qword [rbp + 0x190]
sub rsp, 0x20
mov rcx, rax
mov rdx, r13
call fcn.14003baec
add rsp, 0x20
sub rsp, 0x20
lea rcx, [rbp + 0xf8]
call fcn.14009c286
add rsp, 0x20
add r12, r13
lea rdi, [rbp + 0x110]
mov qword [rdi + 0x39], r13
mov qword [rdi + 0x4a], r12
sub rsp, 0x20
lea rcx, [0x1403fc2a8]
call fcn.1400c1a56
add rsp, 0x20
mov rdx, qword [rbp + 0x1d0]
sub rsp, 0x20
mov r9d, reloc.WS2_32.dll_WSAStartup
mov rcx, rax
mov r8, rdi
call fcn.14003baec
add rsp, 0x20
sub rsp, 0x20
lea rcx, [0x1403fc2a8]
call fcn.1400c1a56
add rsp, 0x20
sub rsp, 0x20
mov r8d, 8
mov rcx, rax
mov rdx, rsi
mov r9d, 4
call fcn.14003c0a2
add rsp, 0x20
sub rsp, 0x20
lea rcx, [0x1403fc2a8]
call fcn.1400c1a56
add rsp, 0x20
sub rsp, 0x20
lea r8, [rbp + 0x1d0]
mov r9d, 8
mov rcx, rax
mov rdx, rsi
call fcn.14003baec
add rsp, 0x20
sub rsp, 0x20
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1403fc2a8]
call fcn.1400c1a56
add rsp, 0x20
sub rsp, 0x20
mov r8d, 8
mov rcx, rax
mov rdx, rsi
mov r9d, 2
call fcn.14003c0a2
add rsp, 0x20
sub rsp, 0x20
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp + 0xf0]
call fcn.14008d348
add rsp, 0x20
sub rsp, 0x20
lea rcx, [rbp + 0xf8]
call fcn.14008dec8
add rsp, 0x20
lea rax, [rbp + 0xa8]
mov qword [rbp + 0x190], rax
mov edi, 0x9c73ea76
lea rax, [rbp + 0xd0]
lea rcx, vtable.dS_G.0
mov edx, 0x1e20fdfc
mov ebx, 0x9c1a7b9b
cmp edi, 0xe0498c4
jle 0x1400caf47
cmp edi, 0xe0498c5
je 0x1400cafba
cmp edi, 0x1e20fdfc
je 0x1400caf7b
cmp edi, 0x35775cf1
jne 0x1400caf12
mov rdi, qword [rbp + 0x190]
mov qword [rdi], rcx
mov edi, 0x9c1a7b9b
jmp 0x1400caf12
cmp edi, 0x9c1a7b9b
je 0x1400caf82
cmp edi, 0x9c73ea76
jne 0x1400caf12
mov edi, dword [0x1404007d0]
lea esi, [rdi - 1]
imul esi, edi
test sil, 1
mov edi, 0x35775cf1
cmove edi, ebx
cmp dword [0x1404007d4], 0xa
cmovl edi, ebx
jmp 0x1400caf12
mov edi, 0xe0498c5
jmp 0x1400caf12
mov rdi, qword [rbp + 0x190]
mov qword [rdi], rcx
mov qword [rbp + 0x110], rax
mov edi, dword [0x1404007d0]
lea esi, [rdi - 1]
imul esi, edi
test sil, 1
mov edi, 0x35775cf1
cmove edi, edx
cmp dword [0x1404007d4], 0xa
cmovl edi, edx
jmp 0x1400caf12
mov rcx, qword [rbp + 0x110]
sub rsp, 0x20
call fcn.14008dec8
add rsp, 0x20
lea rcx, [rbp + 0xb8]
sub rsp, 0x20
call fcn.14002dc72
nop
lea rsp, [rbp + 0x208]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret