Function at 0x14001ef20
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
mov rax, qword [0x14010f080]
xor rax, rsp
mov qword [rbp], rax
mov r13, rcx
xor r14d, r14d
mov rax, qword [0x1401105a0]
test rax, rax
je 0x14001ef8c
mov rdx, qword [rax + 0xa0]
jmp 0x14001ef8f
mov rdx, r14
cmp qword [rdx + 0x18], r14
jne 0x14001efb0
test rax, rax
je 0x14001efb0
mov rcx, qword [rax + 0xa0]
test rcx, rcx
je 0x14001efb0
cmp qword [rcx], r14
je 0x14001efb0
call fcn.140052a10
call fcn.140053420
call fcn.14002d490
lea rcx, [0x14011058c]
call fcn.140026150
call fcn.140001be0
mov rbx, rax
mov edi, 4
mov rcx, qword gs:[0x58]
mov rsi, qword [rcx]
mov ecx, dword [rdi + rsi]
cmp dword [0x140110ae4], ecx
jle 0x14001f019
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
cmp dword [0x140110ae4], 0xffffffff
jne 0x14001f019
mov qword [0x140110b7c], r14
mov byte [0x140110b84], r14b
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
cmp qword [0x140110b18], r14
je 0x14001f04d
cmp byte [rbx + 0xc], r14b
je 0x14001f04d
call fcn.140001be0
mov rcx, rax
call fcn.140001e70
test rax, rax
je 0x14001f04d
mov rcx, rbx
call fcn.140001e70
mov rdx, rax
mov rcx, rbx
call fcn.140002560
call fcn.140019ec0
mov rbx, rax
mov ecx, dword [rdi + rsi]
cmp dword [0x140110ae4], ecx
jle 0x14001f08f
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
cmp dword [0x140110ae4], 0xffffffff
jne 0x14001f08f
mov qword [0x140110b7c], r14
mov byte [0x140110b84], r14b
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
cmp qword [0x140110b18], r14
je 0x14001f0a6
cmp byte [rbx + 3], r14b
je 0x14001f0a6
mov rcx, rbx
call fcn.14001aa20
mov eax, dword [rdi + rsi]
cmp dword [0x140110ae4], eax
jle 0x14001f0e0
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
cmp dword [0x140110ae4], 0xffffffff
jne 0x14001f0e0
mov qword [0x140110b7c], r14
mov byte [0x140110b84], r14b
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
cmp qword [0x140110b18], r14
je 0x14001f0f5
lea rcx, [0x14010f120]
call fcn.14001e410
call fcn.140001be0
movss xmm10, dword [0x1400fb14c]
movss xmm11, dword [0x1400fb18c]
cmp byte [rax + 0xc], r14b
je 0x14001f3c7
call fcn.140001be0
cmp byte [rax + 0x14], r14b
je 0x14001f1da
mov rax, qword [0x1401105a0]
mov rax, qword [rax + 0x4878]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.14002c530
mov rbx, rax
call fcn.140001be0
movss xmm2, dword [rax]
mov ecx, dword [r13 + 0xec]
xorps xmm1, xmm1
cvtsi2ss xmm1, rcx
mov ecx, dword [r13 + 0xe8]
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm1
comiss xmm10, xmm2
ja 0x14001f1da
subss xmm2, xmm10
mov dword [rsp + 0x28], 0x1ff
movss xmm0, dword [0x1400fb268]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.14004b550
movss dword [rsp + 0x28], xmm11
mov dword [rsp + 0x20], 1
mov r9d, 0xffffffff
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140049b30
mov dword [rbx + 0x78], r14d
call fcn.140001be0
cmp byte [rax + 0x15], r14b
je 0x14001f3c7
mov eax, dword [0x140110dd8]
cmp eax, dword [rdi + rsi]
jle 0x14001f24c
lea rcx, [0x140110dd8]
call fcn.1400ddcb8
mov eax, dword [0x140110dd8]
cmp eax, 0xffffffff
jne 0x14001f24c
lea ecx, [rax + 2]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x140110dc8], xmm0
movss dword [0x140110dcc], xmm6
lea rcx, [0x140110dd8]
call fcn.1400ddc4c
mov eax, dword [0x140110dd8]
movss xmm9, dword [0x140110dc8]
mulss xmm9, xmm10
cmp eax, dword [rdi + rsi]
jle 0x14001f2b1
lea rcx, [0x140110dd8]
call fcn.1400ddcb8
cmp dword [0x140110dd8], 0xffffffff
jne 0x14001f2b1
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x140110dc8], xmm0
movss dword [0x140110dcc], xmm6
lea rcx, [0x140110dd8]
call fcn.1400ddc4c
movss xmm8, dword [0x140110dcc]
mulss xmm8, xmm10
mov rax, qword [0x1401105a0]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14002c530
mov r10, rax
movaps xmm0, xmmword [0x1400fb7f0]
movups xmmword [rsp + 0x78], xmm0
lea rcx, [rsp + 0x78]
call fcn.1400287f0
movaps xmm0, xmm9
movss xmm7, dword [0x1400fb270]
addss xmm0, xmm7
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm8
movaps xmm0, xmm9
subss xmm0, xmm7
movss dword [rsp + 0x60], xmm0
movss dword [rsp + 0x64], xmm8
movss xmm6, dword [0x1400fb1a8]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x60]
mov rcx, r10
call fcn.14004bef0
mov rax, qword [0x1401105a0]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14002c530
mov r10, rax
movaps xmm0, xmmword [0x1400fb7f0]
movups xmmword [rsp + 0x78], xmm0
lea rcx, [rsp + 0x78]
call fcn.1400287f0
movss dword [rsp + 0x60], xmm9
movaps xmm0, xmm8
addss xmm0, xmm7
movss dword [rsp + 0x64], xmm0
movss dword [rsp + 0x58], xmm9
subss xmm8, xmm7
movss dword [rsp + 0x5c], xmm8
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov rcx, r10
call fcn.14004bef0
call fcn.140019ec0
cmp byte [rax + 4], r14b
je 0x14001fb80
mov eax, dword [0x140110ae4]
cmp eax, dword [rdi + rsi]
jle 0x14001f418
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
mov eax, dword [0x140110ae4]
cmp eax, 0xffffffff
jne 0x14001f418
mov qword [0x140110b7c], r14
mov byte [0x140110b84], r14b
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
mov eax, dword [0x140110ae4]
mov rbx, qword [0x140110b08]
cmp eax, dword [rdi + rsi]
jle 0x14001f453
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
cmp dword [0x140110ae4], 0xffffffff
jne 0x14001f453
mov qword [0x140110b7c], r14
mov byte [0x140110b84], r14b
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
mov rdi, qword [0x140110b18]
mov qword [rsp + 0x48], rdi
lea rdx, [rbx + 0x18]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rsp + 0x60]
mov rcx, qword [0x140110b88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rsp + 0x60]
lea rdx, [rbx + 0x100]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp - 0x48]
mov rcx, qword [0x140110b88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp - 0x48]
mov qword [rsp + 0x50], rax
lea rdx, [rbx + 0x108]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rsp + 0x58]
mov rcx, qword [0x140110b88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rdi + 0x90]
mov qword [rsp + 0x20], r14
mov r9d, ntohl
lea r8, [rbp - 0x68]
mov rcx, qword [0x140110b88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r14
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400ddd30
mov rbx, rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x68], rax
mov r15d, r14d
mov r12d, dword [rsp + 0x58]
test r12d, r12d
jle 0x14001f85f
movsd xmm8, qword [0x1400fb210]
movsd xmm6, qword [0x1400fb220]
movsd xmm7, qword [0x1400fb200]
movsxd rdx, r14d
add rdx, qword [rsp + 0x50]
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rsp + 0x60]
mov rcx, qword [0x140110b88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rsp + 0x60]
test rbx, rbx
je 0x14001f841
mov eax, 4
mov eax, dword [rax + rsi]
cmp dword [0x140110ae4], eax
jle 0x14001f5ce
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
cmp dword [0x140110ae4], 0xffffffff
jne 0x14001f5ce
xor eax, eax
mov qword [0x140110b7c], rax
mov byte [0x140110b84], al
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
mov rdx, qword [0x140110b68]
add rdx, rbx
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp - 0x40]
mov rcx, qword [0x140110b88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp qword [rbp - 0x40], 0
je 0x14001f841
lea rdx, [rbx + 0x90]
mov qword [rsp + 0x20], 0
mov r9d, ntohl
lea r8, [rbp - 0x58]
mov rcx, qword [0x140110b88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x60]
subss xmm0, dword [rbp - 0x50]
cvtps2pd xmm1, xmm0
comisd xmm8, xmm1
ja 0x14001f841
comisd xmm1, xmm6
ja 0x14001f841
movss xmm1, dword [rbp - 0x64]
subss xmm1, dword [rbp - 0x54]
movss xmm0, dword [rbp - 0x68]
subss xmm0, dword [rbp - 0x58]
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14001f67d
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14001f685
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvtss2sd xmm0, xmm0
comisd xmm0, xmm7
ja 0x14001f841
mov eax, 4
mov eax, dword [rax + rsi]
cmp dword [0x140110ae4], eax
jle 0x14001f6d3
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
cmp dword [0x140110ae4], 0xffffffff
jne 0x14001f6d3
xor eax, eax
mov qword [0x140110b7c], rax
mov byte [0x140110b84], al
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
mov rdx, qword [0x140110b68]
add rdx, rbx
xor ebx, ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 8]
lea r8, [rbp - 0x38]
mov rcx, qword [0x140110b88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, 4
mov eax, dword [rcx + rsi]
cmp dword [0x140110ae4], eax
jle 0x14001f737
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
cmp dword [0x140110ae4], 0xffffffff
jne 0x14001f737
mov qword [0x140110b7c], rbx
mov byte [0x140110b84], bl
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
mov rdx, qword [0x140110b68]
add rdx, rdi
mov qword [rsp + 0x20], rbx
mov r9d, 8
lea r8, [rbp - 0x30]
mov rcx, qword [0x140110b88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x38]
add rdx, 0x88
mov qword [rsp + 0x20], rbx
mov r9d, 4
lea r8, [rsp + 0x58]
mov rcx, qword [0x140110b88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [rsp + 0x58]
test edi, edi
jle 0x14001f841
mov rbx, qword [rsp + 0x68]
mov rax, qword [rbx + 8]
mov qword [rbp - 0x20], rax
xor edx, edx
mov dword [rbp - 0x18], edx
mov rcx, rbx
cmp byte [rax + 0x19], dl
jne 0x14001f7d4
nop dword [rax + rax]
mov qword [rbp - 0x20], rax
cmp dword [rax + 0x1c], edi
jge 0x14001f7c2
mov dword [rbp - 0x18], edx
mov rax, qword [rax + 0x10]
jmp 0x14001f7cf
mov dword [rbp - 0x18], 1
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], dl
je 0x14001f7b0
cmp byte [rcx + 0x19], dl
jne 0x14001f7de
cmp edi, dword [rcx + 0x1c]
jge 0x14001f846
movabs rax, 0x7ffffffffffffff
cmp qword [rsp + 0x70], rax
je 0x1400200b9
lea rax, [rsp + 0x68]
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rdx
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400ddd30
nop
mov dword [rax + 0x1c], edi
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbx
mov word [rax + 0x18], 0
mov qword [rbp - 0x80], 0
movups xmm0, xmmword [rbp - 0x20]
movaps xmmword [rbp - 0x20], xmm0
mov r8, rax
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x68]
call fcn.140002ca0
mov rbx, qword [rsp + 0x68]
inc r15d
add r14d, 0x10
cmp r15d, r12d
jge 0x14001f85c
mov rdi, qword [rsp + 0x48]
jmp 0x14001f557
xor r14d, r14d
movss xmm1, dword [0x1400fb2d0]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
sete al
test rcx, rcx
jne 0x14001f884
cmp byte [r13 + 0x150], cl
je 0x14001fb33
test al, al
jne 0x14001f8bb
xorps xmm0, xmm0
test rcx, rcx
js 0x14001f897
cvtsi2ss xmm0, rcx
jmp 0x14001f8ac
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mulss xmm0, dword [0x1400fb2b4]
addss xmm0, xmm1
movaps xmm1, xmm0
mov rax, qword [0x1401105a0]
or dword [rax + 0x4778], 2
mov dword [rax + 0x4798], 0x43160000
movss dword [rax + 0x479c], xmm1
mov dword [rax + 0x4780], 1
xor edx, edx
lea r8d, [rdx + 3]
lea rdi, str.Spectator_List
mov rcx, rdi
call fcn.1400328e0
test al, al
je 0x14001fb29
mov rbx, qword [0x1401105a0]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rdi
movss xmm0, dword [0x1400fb414]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x1400fb3f4]
movss xmm2, dword [rbx + 0x3c00]
lea rdx, [rsp + 0x48]
mov rcx, qword [rbx + 0x3bf8]
call fcn.1400508d0
movss xmm0, dword [rsp + 0x48]
addss xmm0, dword [0x1400fb184]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm2, dword [0x1400fb324]
subss xmm2, xmm1
mulss xmm2, xmm10
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ea0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm0, xmm2
movss dword [rax + 0xf8], xmm0
mov byte [rax + 0x139], 1
mov rcx, rdi
call fcn.1400561e0
mov rax, qword [0x1401105a0]
mov rax, qword [rax + 0x3ea0]
cmp byte [rax + 0xb3], 0
jne 0x14001f9cf
mov eax, dword [rax + 0x1ac]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14005a210
mov rbx, qword [rsp + 0x68]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
jne 0x14001fb29
mov r8d, dword [rbx + 0x1c]
lea r10, [rbp - 0xb]
test r8d, r8d
jns 0x14001fa30
neg r8d
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x14001f9f1
dec r10
mov byte [r10], reloc.WLDAP32.dll_Ordinal_45
jmp 0x14001fa5a
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x14001fa30
lea r9, [rsp + 0x40]
lea r8, [rbp - 0xb]
mov rdx, r10
lea rcx, [rsp + 0x78]
call fcn.140011630
nop
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rdx, qword [rsp + 0x78]
lea rcx, [0x1400f3a98]
call fcn.1400561e0
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x14001faca
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001fac5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001fde3
call fcn.1400ddfb4
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x14001faf8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14001faf3
nop
cmp rbx, qword [rax + 0x10]
jne 0x14001faf3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14001fae0
mov rbx, rax
jmp 0x14001fb1f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x14001fb1f
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x14001fb10
cmp byte [rbx + 0x19], 0
je 0x14001f9e1
call fcn.140034cc0
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rbx + 8]
cmp byte [rdi + 0x19], 0
jne 0x14001fb6e
nop dword [rax]
mov r8, qword [rdi + 0x10]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x68]
call fcn.140024030
mov rcx, rdi
mov rdi, qword [rdi]
mov edx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400ddfb4
cmp byte [rdi + 0x19], 0
je 0x14001fb40
mov rbx, qword [rsp + 0x68]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rbx
call fcn.1400ddfb4
mov edi, 4
call fcn.140001be0
mov ecx, dword [rax + 0x24]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14001fba4
cmp byte [r13 + 0x150], 0
sete al
mov byte [r13 + 0x150], al
mov eax, dword [rdi + rsi]
cmp dword [0x140110ae4], eax
jle 0x14001fbe2
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
cmp dword [0x140110ae4], 0xffffffff
jne 0x14001fbe2
mov qword [0x140110b7c], 0
mov byte [0x140110b84], 0
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
mov ecx, dword [0x140110b7c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14001fcad
movss xmm6, dword [0x14010f12c]
mov eax, dword [0x140110ae4]
cmp eax, dword [rdi + rsi]
jle 0x14001fc7c
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
mov eax, dword [0x140110ae4]
cmp eax, 0xffffffff
jne 0x14001fc44
mov qword [0x140110b7c], 0
mov byte [0x140110b84], 0
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
mov eax, dword [0x140110ae4]
cmp eax, dword [rdi + rsi]
jle 0x14001fc7c
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
cmp dword [0x140110ae4], 0xffffffff
jne 0x14001fc7c
mov qword [0x140110b7c], 0
mov byte [0x140110b84], 0
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
movss dword [rsp + 0x58], xmm6
mov rdx, qword [0x140110af0]
add rdx, qword [0x140110b18]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rsp + 0x58]
mov rcx, qword [0x140110b88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rdi + rsi]
cmp dword [0x140110ae4], eax
jle 0x14001fceb
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
cmp dword [0x140110ae4], 0xffffffff
jne 0x14001fceb
mov qword [0x140110b7c], 0
mov byte [0x140110b84], 0
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
mov ecx, dword [0x140110b80]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14001fdb6
movss xmm6, dword [0x14010f130]
mov eax, dword [0x140110ae4]
cmp eax, dword [rdi + rsi]
jle 0x14001fd85
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
mov eax, dword [0x140110ae4]
cmp eax, 0xffffffff
jne 0x14001fd4d
mov qword [0x140110b7c], 0
mov byte [0x140110b84], 0
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
mov eax, dword [0x140110ae4]
cmp eax, dword [rdi + rsi]
jle 0x14001fd85
lea rcx, [0x140110ae4]
call fcn.1400ddcb8
cmp dword [0x140110ae4], 0xffffffff
jne 0x14001fd85
mov qword [0x140110b7c], 0
mov byte [0x140110b84], 0
lea rcx, [0x140110ae4]
call fcn.1400ddc4c
movss dword [rsp + 0x58], xmm6
mov rdx, qword [0x140110af8]
add rdx, qword [0x140110b18]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rsp + 0x58]
mov rcx, qword [0x140110b88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.140001be0
mov ecx, dword [rax + 0x20]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14001fdea
cmp byte [0x14011058d], 0
je 0x14001fdea
cmp byte [0x14011058c], 0
sete al
mov byte [0x14011058c], al
jmp 0x14001fdf1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movzx eax, byte [0x14011058c]
test al, al
je 0x14001fe99
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor r9d, r9d
xor edx, edx
mov cl, 0x26
test ax, ax
jns 0x14001fe15
xor r8d, r8d
jmp 0x14001fe1b
mov r8d, 2
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor r9d, r9d
xor edx, edx
mov cl, 0x25
test ax, ax
jns 0x14001fe3d
xor r8d, r8d
jmp 0x14001fe43
mov r8d, 2
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor r9d, r9d
xor edx, edx
mov cl, Ordinal_41
test ax, ax
jns 0x14001fe65
xor r8d, r8d
jmp 0x14001fe6b
mov r8d, 2
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x44
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor r9d, r9d
xor edx, edx
mov cl, 0x27
test ax, ax
jns 0x14001fe8d
xor r8d, r8d
jmp 0x14001fe93
mov r8d, 2
call qword [sym.imp.USER32.dll_keybd_event]
cmp byte [r13 + 0x150], 0
je 0x14001feb3
mov rcx, r13
call fcn.14006fb70
mov r8d, 0xa0
jmp 0x14001feb9
mov r8d, 0x800a0
mov edx, 0xffffffec
mov rcx, qword [r13 + 0x50]
call qword [sym.imp.USER32.dll_SetWindowLongA]
movzx eax, byte [r13 + 0x150]
mov rcx, qword [0x1401105a0]
mov byte [rcx + 0x78], al
movzx eax, byte [r13 + 0x150]
mov byte [rcx + 0xd9], al
call fcn.14002f100
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r14d
movss dword [rsp + 0x28], xmm11
mov dword [rsp + 0x20], r14d
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14001ff97
call fcn.14002f4c0
mov rax, qword [0x1401105a0]
mov rcx, qword [rax + 0x4878]
mov rcx, qword [rcx]
add rcx, 0x48
cmp byte [rcx], 0
cmove rcx, r14
call fcn.140052450
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14002006e
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x14002006e
mov rbx, qword [0x1401105a0]
test rbx, rbx
je 0x140020037
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
je 0x140020037
cmp qword [rbx], 0
je 0x140020037
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140020002
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 8], r14
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140020015
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x10], r14
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140020037
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x18], r14
mov rax, qword [0x1401105a0]
mov rcx, qword [rax + 0x58]
mov qword [rcx + 8], r14
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
lea rdx, [r13 + 0xa0]
call qword [rax + 0x80]
mov rax, qword [0x1401105a0]
test rax, rax
je 0x14002006e
mov rax, qword [rax + 0xa0]
test rax, rax
je 0x14002006e
cmp qword [rax], 0
je 0x14002006e
call fcn.140052a10
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.1400ddbf0
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001bc0
nop
int3