Function at 0xbeef73b0
Capabilities:
Get common file path
Identify system language via api
Link many functions at runtime
Log keystrokes via polling

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1180
call sub.KERNEL32.dll___chkstk
sub rsp, rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov qword [0xbef0e4e0], rax
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov ecx, 0x804
cmp ax, cx
sete byte [0xbef0dc98]
lea rcx, [0xbeef1f80]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [0xbef0e548], rax
mov byte [rsp + 0x81], 0
lea rcx, [0xbeef1f98]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [0xbef0e528], rax
lea rcx, [0xbeef1fb8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [0xbef0e580], rax
rdtsc
shl rdx, 0x20
or rax, rdx
mov dword [0xbef0dfb8], eax
mov rsi, qword [0xbef0e528]
xor ebx, ebx
mov eax, ebx
mov r8, qword [0xbef0e568]
lea rdi, [0xbeef1fd8]
test r8, r8
je 0xbeef747e
cmp rdi, qword [0xbef0dab0]
jb 0xbeef747e
cmp rdi, qword [0xbef0dab8]
ja 0xbeef747e
mov rdx, rdi
mov rcx, rsi
call r8
mov r8, qword [0xbef0e568]
test rax, rax
jne 0xbeef7496
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r8, qword [0xbef0e568]
mov qword [0xbef0e590], rax
mov rsi, qword [0xbef0e528]
mov rax, rbx
lea rdi, [0xbeef1fe8]
test r8, r8
je 0xbeef74d5
cmp rdi, qword [0xbef0dab0]
jb 0xbeef74d5
cmp rdi, qword [0xbef0dab8]
ja 0xbeef74d5
mov rdx, rdi
mov rcx, rsi
call r8
mov r8, qword [0xbef0e568]
test rax, rax
jne 0xbeef74ed
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r8, qword [0xbef0e568]
mov qword [0xbef0e4a0], rax
mov rsi, qword [0xbef0e528]
mov rax, rbx
lea rdi, [0xbeef1ff8]
test r8, r8
je 0xbeef752c
cmp rdi, qword [0xbef0dab0]
jb 0xbeef752c
cmp rdi, qword [0xbef0dab8]
ja 0xbeef752c
mov rdx, rdi
mov rcx, rsi
call r8
mov r8, qword [0xbef0e568]
test rax, rax
jne 0xbeef7544
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r8, qword [0xbef0e568]
mov qword [0xbef0e4d0], rax
mov rsi, qword [0xbef0e528]
mov rax, rbx
lea rdi, [0xbeef2008]
test r8, r8
je 0xbeef7583
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7583
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7583
mov rdx, rdi
mov rcx, rsi
call r8
mov r8, qword [0xbef0e568]
test rax, rax
jne 0xbeef759b
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r8, qword [0xbef0e568]
mov qword [0xbef0e510], rax
mov rsi, qword [0xbef0e548]
mov rax, rbx
lea rdi, [0xbeef2018]
test r8, r8
je 0xbeef75d3
cmp rdi, qword [0xbef0dab0]
jb 0xbeef75d3
cmp rdi, qword [0xbef0dab8]
ja 0xbeef75d3
mov rdx, rdi
mov rcx, rsi
call r8
test rax, rax
jne 0xbeef75e4
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0xbef0e568], rax
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2038]
test rax, rax
je 0xbeef7625
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7625
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7625
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7640
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de50], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2048]
test rax, rax
je 0xbeef7681
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7681
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7681
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef769c
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e550], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2054]
test rax, rax
je 0xbeef76dd
cmp rdi, qword [0xbef0dab0]
jb 0xbeef76dd
cmp rdi, qword [0xbef0dab8]
ja 0xbeef76dd
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef76f8
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e4c0], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2060]
test rax, rax
je 0xbeef7739
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7739
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7739
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7754
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e520], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2070]
test rax, rax
je 0xbeef7795
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7795
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7795
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef77b0
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e558], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef207c]
test rax, rax
je 0xbeef77f1
cmp rdi, qword [0xbef0dab0]
jb 0xbeef77f1
cmp rdi, qword [0xbef0dab8]
ja 0xbeef77f1
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef780c
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e530], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2084]
test rax, rax
je 0xbeef784d
cmp rdi, qword [0xbef0dab0]
jb 0xbeef784d
cmp rdi, qword [0xbef0dab8]
ja 0xbeef784d
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7868
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e4b8], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2090]
test rax, rax
je 0xbeef78a9
cmp rdi, qword [0xbef0dab0]
jb 0xbeef78a9
cmp rdi, qword [0xbef0dab8]
ja 0xbeef78a9
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef78c4
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e588], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2098]
test rax, rax
je 0xbeef7905
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7905
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7905
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7920
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de60], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef20a8]
test rax, rax
je 0xbeef7961
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7961
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7961
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef797c
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0df80], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef20c0]
test rax, rax
je 0xbeef79bd
cmp rdi, qword [0xbef0dab0]
jb 0xbeef79bd
cmp rdi, qword [0xbef0dab8]
ja 0xbeef79bd
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef79d8
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dd68], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef20d0]
test rax, rax
je 0xbeef7a19
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7a19
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7a19
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7a34
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0def8], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef20f0]
test rax, rax
je 0xbeef7a75
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7a75
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7a75
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7a90
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dd78], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2110]
test rax, rax
je 0xbeef7ad1
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7ad1
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7ad1
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7aec
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dde8], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2128]
test rax, rax
je 0xbeef7b2d
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7b2d
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7b2d
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7b48
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de00], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2140]
test rax, rax
je 0xbeef7b89
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7b89
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7b89
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7ba4
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de98], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2150]
test rax, rax
je 0xbeef7be5
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7be5
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7be5
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7c00
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dec0], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2170]
test rax, rax
je 0xbeef7c41
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7c41
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7c41
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7c5c
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dda0], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2188]
test rax, rax
je 0xbeef7c9d
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7c9d
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7c9d
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7cb8
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dd90], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef21a8]
test rax, rax
je 0xbeef7cf9
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7cf9
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7cf9
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7d14
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de68], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef21c0]
test rax, rax
je 0xbeef7d55
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7d55
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7d55
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7d70
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dc90], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef21d8]
test rax, rax
je 0xbeef7db1
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7db1
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7db1
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7dcc
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de78], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef21e8]
test rax, rax
je 0xbeef7e0d
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7e0d
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7e0d
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7e28
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dd30], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef21f8]
test rax, rax
je 0xbeef7e69
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7e69
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7e69
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7e84
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de48], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2208]
test rax, rax
je 0xbeef7ec5
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7ec5
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7ec5
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7ee0
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e570], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2220]
test rax, rax
je 0xbeef7f21
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7f21
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7f21
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7f3c
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e4d8], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2238]
test rax, rax
je 0xbeef7f7d
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7f7d
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7f7d
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7f98
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0ded8], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2250]
test rax, rax
je 0xbeef7fd9
cmp rdi, qword [0xbef0dab0]
jb 0xbeef7fd9
cmp rdi, qword [0xbef0dab8]
ja 0xbeef7fd9
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef7ff4
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dd70], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2260]
test rax, rax
je 0xbeef8035
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8035
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8035
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8050
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de90], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2278]
test rax, rax
je 0xbeef8091
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8091
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8091
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef80ac
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e4a8], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2290]
test rax, rax
je 0xbeef80ed
cmp rdi, qword [0xbef0dab0]
jb 0xbeef80ed
cmp rdi, qword [0xbef0dab8]
ja 0xbeef80ed
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8108
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0df78], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef22a8]
test rax, rax
je 0xbeef8149
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8149
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8149
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8164
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0df98], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef22c0]
test rax, rax
je 0xbeef81a5
cmp rdi, qword [0xbef0dab0]
jb 0xbeef81a5
cmp rdi, qword [0xbef0dab8]
ja 0xbeef81a5
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef81c0
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de38], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef22d8]
test rax, rax
je 0xbeef8201
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8201
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8201
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef821c
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dde0], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef22f0]
test rax, rax
je 0xbeef825d
cmp rdi, qword [0xbef0dab0]
jb 0xbeef825d
cmp rdi, qword [0xbef0dab8]
ja 0xbeef825d
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8278
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de30], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2308]
test rax, rax
je 0xbeef82b9
cmp rdi, qword [0xbef0dab0]
jb 0xbeef82b9
cmp rdi, qword [0xbef0dab8]
ja 0xbeef82b9
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef82d4
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0ddb8], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2320]
test rax, rax
je 0xbeef8315
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8315
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8315
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8330
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0df38], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2338]
test rax, rax
je 0xbeef8371
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8371
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8371
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef838c
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0ddf8], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2350]
test rax, rax
je 0xbeef83cd
cmp rdi, qword [0xbef0dab0]
jb 0xbeef83cd
cmp rdi, qword [0xbef0dab8]
ja 0xbeef83cd
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef83e8
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dd88], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2368]
test rax, rax
je 0xbeef8429
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8429
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8429
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8444
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0df00], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2380]
test rax, rax
je 0xbeef8485
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8485
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8485
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef84a0
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e4f0], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2390]
test rax, rax
je 0xbeef84e1
cmp rdi, qword [0xbef0dab0]
jb 0xbeef84e1
cmp rdi, qword [0xbef0dab8]
ja 0xbeef84e1
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef84fc
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dd20], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef23a0]
test rax, rax
je 0xbeef853d
cmp rdi, qword [0xbef0dab0]
jb 0xbeef853d
cmp rdi, qword [0xbef0dab8]
ja 0xbeef853d
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8558
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dee0], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef23b0]
test rax, rax
je 0xbeef8599
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8599
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8599
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef85b4
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0ddf0], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef23c8]
test rax, rax
je 0xbeef85f5
cmp rdi, qword [0xbef0dab0]
jb 0xbeef85f5
cmp rdi, qword [0xbef0dab8]
ja 0xbeef85f5
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8610
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dd28], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef23d8]
test rax, rax
je 0xbeef8651
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8651
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8651
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef866c
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0ddd8], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef23e8]
test rax, rax
je 0xbeef86ad
cmp rdi, qword [0xbef0dab0]
jb 0xbeef86ad
cmp rdi, qword [0xbef0dab8]
ja 0xbeef86ad
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef86c8
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de70], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef23f8]
test rax, rax
je 0xbeef8709
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8709
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8709
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8724
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0def0], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2408]
test rax, rax
je 0xbeef8765
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8765
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8765
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8780
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dd58], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2420]
test rax, rax
je 0xbeef87c1
cmp rdi, qword [0xbef0dab0]
jb 0xbeef87c1
cmp rdi, qword [0xbef0dab8]
ja 0xbeef87c1
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef87dc
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de28], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2438]
test rax, rax
je 0xbeef881d
cmp rdi, qword [0xbef0dab0]
jb 0xbeef881d
cmp rdi, qword [0xbef0dab8]
ja 0xbeef881d
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8838
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de20], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2450]
test rax, rax
je 0xbeef8879
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8879
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8879
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8894
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e4b0], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2468]
test rax, rax
je 0xbeef88d5
cmp rdi, qword [0xbef0dab0]
jb 0xbeef88d5
cmp rdi, qword [0xbef0dab8]
ja 0xbeef88d5
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef88f0
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e4c8], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2488]
test rax, rax
je 0xbeef8931
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8931
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8931
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef894c
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0e4f8], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef2490]
test rax, rax
je 0xbeef898d
cmp rdi, qword [0xbef0dab0]
jb 0xbeef898d
cmp rdi, qword [0xbef0dab8]
ja 0xbeef898d
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef89a8
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dd80], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef24a0]
test rax, rax
je 0xbeef89e9
cmp rdi, qword [0xbef0dab0]
jb 0xbeef89e9
cmp rdi, qword [0xbef0dab8]
ja 0xbeef89e9
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8a04
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0ddc8], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef24b0]
test rax, rax
je 0xbeef8a45
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8a45
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8a45
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8a60
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0de08], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef24c8]
test rax, rax
je 0xbeef8aa1
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8aa1
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8aa1
mov rdx, rdi
mov rcx, rsi
call rax
mov rcx, rax
mov rax, qword [0xbef0e568]
test rcx, rcx
jne 0xbeef8abc
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0df90], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef24e0]
test rax, rax
je 0xbeef8afd
cmp rdi, qword [0xbef0dab0]
jb 0xbeef8afd
cmp rdi, qword [0xbef0dab8]
ja 0xbeef8afd
test rcx, rcx
jne 0xbeef8b18
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
mov rax, qword [0xbef0e568]
mov qword [0xbef0dea0], rcx
mov rsi, qword [0xbef0e548]
mov rcx, rbx
lea rdi, [0xbeef24f8]
test rax, rax
je 0xbeef8b59