Function at 0x140001990
Capabilities:
Check for time delay via queryperformancecounter
Hide graphical window
Log keystrokes via polling

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1d8
movups xmmword [rsp + 0x1c0], xmm6
lea rax, [0x140001740]
mov edx, 0x65
mov dword [0x14002fa80], 3
mov qword [0x14002fa88], rax
lea rdi, [0x140024038]
mov qword [0x14002fa90], 0
mov esi, r9d
mov rbx, rcx
mov qword [0x14002fa98], rcx
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [0x14002faa0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [0x14002fac0], rdi
lea rcx, [0x14002fa80]
mov qword [0x14002faa8], rax
call qword [sym.imp.USER32.dll_RegisterClassA]
lea rcx, [0x14002faf0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov rcx, qword [0x14002faf0]
pxor xmm0, xmm0
movabs rax, 0x20c49ba5e353f7cf
mov r12, qword [sym.imp.USER32.dll_GetSystemMetrics]
movups xmmword [rsp + 0xc0], xmm0
imul rcx
sar rcx, 0x3f
movups xmmword [rsp + 0xd0], xmm0
movups xmmword [rsp + 0x94], xmm0
movups xmmword [rsp + 0xa4], xmm0
mov qword [rsp + 0xe0], 0
sar rdx, 7
mov dword [rsp + 0xb4], 0
sub rdx, rcx
mov ecx, 1
mov qword [0x14002faf0], rdx
imul edx, edx, 0x64
mov dword [rsp + 0x90], 1
mov qword [0x14002fa60], 0xffffffffffffec78
mov dword [0x14002fae8], edx
call r12
xor ecx, ecx
mov ebp, eax
call r12
pxor xmm0, xmm0
xor ecx, ecx
mov qword [rsp + 0x50], rbx
cvtsi2ss xmm0, ebp
mov rbx, qword [sym.imp.USER32.dll_CreateWindowExA]
divss xmm0, dword [str.ff_H]
mov r9d, 0xc80000
cvttss2si edx, xmm0
pxor xmm0, xmm0
lea r8, section..rdata
mov qword [rsp + 0x58], 0
cvtsi2ss xmm0, eax
divss xmm0, dword [0x140024114]
mov qword [rsp + 0x48], 0
lea rbp, str.Edit
cvttss2si eax, xmm0
mov dword [rsp + 0x38], 0xb4
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x28], edx
mov rdx, rdi
lea rdi, str.Static
mov dword [rsp + 0x30], 0x96
mov dword [rsp + 0x20], eax
call rbx
mov rdx, rdi
xor ecx, ecx
mov r9d, 0x50000000
lea r8, [0x14002403a]
mov qword [0x14002fb28], rax
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x8d
mov dword [rsp + 0x30], 0x87
mov dword [rsp + 0x28], 5
mov dword [rsp + 0x20], 5
call rbx
mov rax, qword [0x14002fb28]
mov rdx, rdi
xor ecx, ecx
mov r9d, 0x50000000
lea r8, str._rate__ms__n_trigger_n_output
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x32
mov dword [rsp + 0x30], 0x4b
mov dword [rsp + 0x28], 0xa
mov dword [rsp + 0x20], 6
call rbx
mov rax, qword [0x14002fb28]
mov rdx, rdi
xor ecx, ecx
mov r9d, 0x50000000
lea r8, str._variation_n_stop_after
mov qword [rsp + 0x58], 0
lea rdi, str.Button
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x21
mov dword [rsp + 0x30], 0x4b
mov dword [rsp + 0x28], 0x6e
mov dword [rsp + 0x20], 6
call rbx
mov rax, qword [0x14002fb28]
xor ecx, ecx
mov rdx, rdi
mov r9d, 0x50000000
lea r8, [0x140024075]
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x14
mov dword [rsp + 0x30], 0x3d
mov dword [rsp + 0x28], 0x19
mov dword [rsp + 0x20], 0x4f
call rbx
mov rax, qword [0x14002fb28]
xor ecx, ecx
mov rdx, rdi
mov r9d, 0x50000000
lea r8, [0x140024080]
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 3
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x14
mov dword [rsp + 0x30], 0x3d
mov dword [rsp + 0x28], 0x2d
mov dword [rsp + 0x20], 0x4f
call rbx
mov rax, qword [0x14002fb28]
xor ecx, ecx
mov rdx, rdi
mov r9d, 0x50000003
lea r8, str.always_on_top
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 5
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x12
mov dword [rsp + 0x30], 0x86
mov dword [rsp + 0x28], 0x56
mov dword [rsp + 0x20], 6
call rbx
mov rax, qword [0x14002fb28]
xor ecx, ecx
mov rdx, rbp
mov r9d, 0x50802000
lea r8, [0x140024090]
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 4
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x14
mov dword [rsp + 0x30], 0x3d
mov dword [rsp + 0x28], 5
mov dword [rsp + 0x20], 0x4f
call rbx
xor ecx, ecx
mov r9d, 0x50802000
mov rdx, rbp
mov qword [0x14002faf8], rax
mov rax, qword [0x14002fb28]
lea r8, [0x140024099]
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 4
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x14
mov dword [rsp + 0x30], 0x3d
mov dword [rsp + 0x28], 0x6b
mov dword [rsp + 0x20], 0x4f
call rbx
mov r9d, 0x50802000
mov rdx, rbp
xor ecx, ecx
mov qword [0x14002fad0], rax
mov rax, qword [0x14002fb28]
lea r8, [0x140024099]
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 4
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x14
mov dword [rsp + 0x30], 0x3d
mov dword [rsp + 0x28], 0x7e
mov dword [rsp + 0x20], 0x4f
call rbx
mov r9d, 0x50000003
mov rdx, rdi
xor ecx, ecx
mov qword [0x14002fae0], rax
mov rax, qword [0x14002fb28]
lea r8, str.toggle
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x14
mov dword [rsp + 0x30], 0x86
mov dword [rsp + 0x28], 0x42
mov dword [rsp + 0x20], 6
call rbx
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf5
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageA]
mov rcx, qword [0x14002fb28]
mov edx, esi
mov r14, qword [sym.imp.USER32.dll_ShowWindow]
call r14
mov r15, qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rcx, [rsp + 0x68]
call r15
mov r12, qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov r13, qword [sym.imp.KERNEL32.dll_Sleep]
nop word cs:[rax + rax]
cmp byte [0x140023004], 0
je 0x1400028d4
mov ecx, 0x1b
call r12
test ax, ax
je 0x140001fe8
mov edx, dword [0x14002fb34]
test edx, edx
jne 0x14000244e
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x14002fb28]
mov ebp, dword [0x14002fb34]
cmp rcx, rax
je 0x1400029de
cmp ebp, 1
je 0x140001f98
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rsi, qword [sym.imp.USER32.dll_PeekMessageA]
mov rbp, qword [sym.imp.USER32.dll_TranslateMessage]
lea rbx, [0x14002f040]
mov rdi, qword [sym.imp.USER32.dll_DispatchMessageA]
nop dword [rax]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 1
mov rcx, rbx
call rsi
test eax, eax
je 0x140001f40
mov rcx, rbx
call rbp
mov rcx, rbx
call rdi
jmp 0x140001fb8
mov eax, dword [0x14002fb34]
test eax, eax
jne 0x140002030
cmp byte [0x14002fb20], 0
je 0x140002881
pxor xmm0, xmm0
xor ecx, ecx
lea rdx, [0x14002fb10]
movups xmmword [0x14002fb10], xmm0
call sub.XINPUT1_3.dll_XInputGetState
test eax, eax
je 0x140002ad8
mov ebp, dword [0x14002fb34]
jmp 0x140001f88
mov ebp, 1
cmp eax, 1
jne 0x140002084
jmp 0x14000294c
mov eax, ebp
and eax, 0xfffffff7
cmp eax, 0xe0
je 0x1400020f8
mov ebx, ebp
mov ecx, ebx
call r12
mov ecx, ebx
call r12
test ax, ax
je 0x140002075
cmp ebp, dword [section..data]
je 0x140002075
cmp dword [0x140023008], ebp
jne 0x14000212d
add ebp, 1
cmp ebp, 0xfa
ja 0x1400024a2
cmp ebp, 0xa
je 0x1400028f2
cmp ebp, 0xe
je 0x140002910
cmp ebp, 0x16
je 0x14000291f
cmp ebp, 0x3a
je 0x140002901
cmp ebp, 0x88
je 0x14000243f
cmp ebp, 0x97
je 0x14000292e
cmp ebp, 0xd8
je 0x14000293d
cmp ebp, 0xeb
je 0x1400029c0
cmp ebp, 0xf8
je 0x1400029cf
cmp ebp, 7
sete al
cmp ebp, 0x5e
sete dl
or al, dl
je 0x140002040
lea esi, [rbp + 1]
mov ecx, esi
mov ebx, esi
call r12
mov ecx, esi
call r12
test ax, ax
je 0x140002430
add ebp, 2
cmp esi, dword [section..data]
je 0x140002084
mov ebp, esi
cmp dword [0x140023008], ebp
je 0x140002075
cmp dword [0x14002fb34], 2
mov byte [0x14002fb20], 0
je 0x140002d08
mov dword [section..data], ebp
lea rsi, [rsp + 0x80]
lea rdi, [rsp + 0x70]
xor r8d, r8d
mov qword [rsp + 0x70], rsi
cmp ebp, 9
jbe 0x1400030a9
cmp ebp, 0x63
jbe 0x140002af0
mov edx, 3
mov rcx, rdi
call fcn.14001d960
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
movabs rax, 0x3330323031303030
mov qword [rsp + 0xf0], rax
movabs rdx, 0x3730363035303430
movabs rax, 0x3131303139303830
mov qword [rsp + 0xf8], rdx
movabs rdx, 0x3531343133313231
mov qword [rsp + 0x100], rax
movabs rax, 0x3931383137313631
mov qword [rsp + 0x108], rdx
movabs rdx, 0x3332323231323032
mov qword [rsp + 0x110], rax
movabs rax, 0x3732363235323432
mov qword [rsp + 0x118], rdx
movabs rdx, 0x3133303339323832
mov qword [rsp + 0x120], rax
movabs rax, 0x3533343333333233
mov qword [rsp + 0x128], rdx
movabs rdx, 0x3933383337333633
mov qword [rsp + 0x130], rax
movabs rax, 0x3334323431343034
mov qword [rsp + 0x138], rdx
movabs rdx, 0x3734363435343434
mov qword [rsp + 0x140], rax
movabs rax, 0x3135303539343834
mov qword [rsp + 0x148], rdx
movabs rdx, 0x3535343533353235
mov qword [rsp + 0x150], rax
movabs rax, 0x3935383537353635
mov qword [rsp + 0x158], rdx
movabs rdx, 0x3336323631363036
mov qword [rsp + 0x160], rax
movabs rax, 0x3736363635363436
mov qword [rsp + 0x168], rdx
movabs rdx, 0x3137303739363836
mov qword [rsp + 0x170], rax
movabs rax, 0x3537343733373237
mov qword [rsp + 0x178], rdx
movabs rdx, 0x3937383737373637
mov qword [rsp + 0x180], rax
movabs rax, 0x3338323831383038
mov qword [rsp + 0x188], rdx
movabs rdx, 0x3738363835383438
mov qword [rsp + 0x190], rax
movabs rax, 0x3139303939383838
mov qword [rsp + 0x198], rdx
movabs rdx, 0x3539343933393239
mov qword [rsp + 0x1a0], rax
movabs rax, 0x3935393439333932
mov qword [rsp + 0x1a8], rdx
movabs rdx, 0x39393839373936
mov qword [rsp + 0x1a9], rax
mov eax, ebp
imul rax, rax, 0x51eb851f
mov qword [rsp + 0x1b1], rdx
mov edx, ebp
shr rax, 0x25
imul r9d, eax, 0x64
mov ebp, eax
lea eax, [r8 - 1]
sub r8d, 2
sub edx, r9d
add edx, edx
lea r9d, [rdx + 1]
movzx r9d, byte [rsp + r9 + 0xf0]
mov byte [rcx + rax], r9b
mov eax, edx
movzx eax, byte [rsp + rax + 0xf0]
mov byte [rcx + r8], al
add ebp, 0x30
mov byte [rcx], bpl
mov edx, dword [0x14002fb34]
mov r8, qword [rsp + 0x70]
mov rcx, qword [0x14002fb28]
call qword [sym.imp.USER32.dll_SetDlgItemTextA]
mov rcx, qword [rsp + 0x70]
cmp rcx, rsi
je 0x1400023d3
mov rax, qword [rsp + 0x80]
lea rdx, [rax + 1]
call fcn.140021780
mov rcx, qword [0x14002fb28]
mov dword [0x14002fb34], 0
call qword [sym.imp.USER32.dll_SetFocus]
mov rcx, qword [0x14002fb28]
lea rdx, section..rdata
call qword [sym.imp.USER32.dll_SetWindowTextA]
mov rsi, qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140002417
mov ecx, 1
call rsi
mov ecx, ebx
call r12
test ax, ax
jne 0x140002410
jmp 0x140002020
add ebp, 2
cmp ebp, 0x88
jne 0x1400020b4
mov ebx, 0x90
mov ebp, 0x90
jmp 0x140002052
mov rcx, qword [0x14002fb28]
mov dword [0x14002fb34], 0
call qword [sym.imp.USER32.dll_SetFocus]
mov rcx, qword [0x14002fb28]
lea rdx, section..rdata
call qword [sym.imp.USER32.dll_SetWindowTextA]
mov byte [0x14002fb30], 0
jmp 0x140002490
mov ecx, 1
call r13
mov ecx, 0x1b
call r12
test ax, ax
jne 0x140002488
jmp 0x140002020
mov ebp, dword [0x14002fb34]
pxor xmm0, xmm0
lea rbx, [0x14002fb10]
movups xmmword [0x14002fb10], xmm0
cmp ebp, 2
jne 0x140001f88
xor ecx, ecx
mov rdx, rbx
call sub.XINPUT1_3.dll_XInputGetState
test eax, eax
jne 0x140002020
movzx eax, word [0x14002fb14]
test ax, ax
je 0x140002020
mov byte [0x14002fb20], 1
test al, 1
jne 0x14000319d
test al, 2
jne 0x140003196
test al, 4
jne 0x14000318a
test al, 8
jne 0x14000314e
test al, 0x10
jne 0x14000313f
test al, 0x20
jne 0x140003130
test al, 0x40
jne 0x140002e81
test al, 0x80
jne 0x140003124
test ah, 1
jne 0x140003118
test ah, 2
jne 0x1400030fe
test ah, 4
jne 0x1400030f2
test ah, 8
jne 0x1400030e6
test ah, 0x10
jne 0x1400030da
test ah, 0x20
jne 0x1400030c0
and ax, 0x4000
cmp ax, 1
sbb edx, edx
and edx, 0x4000
add edx, 0x4000
mov dword [0x140023008], edx
mov ebp, edx
mov edx, 5
lea rdi, [rsp + 0x70]
xor r8d, r8d
lea rsi, [rsp + 0x80]
mov rcx, rdi
mov qword [rsp + 0x70], rsi
call fcn.14001d960
mov eax, dword [rsp + 0x78]
mov rdx, qword [rsp + 0x70]
movabs r10, 0x3330323031303030
movabs r11, 0x3730363035303430
mov qword [rsp + 0xf0], r10
movabs r10, 0x3131303139303830
mov qword [rsp + 0xf8], r11
lea r8d, [rax - 1]
movabs r11, 0x3531343133313231
mov qword [rsp + 0x100], r10
movabs r10, 0x3931383137313631
mov qword [rsp + 0x108], r11
movabs r11, 0x3332323231323032
mov qword [rsp + 0x110], r10
movabs r10, 0x3732363235323432
mov qword [rsp + 0x118], r11
movabs r11, 0x3133303339323832
mov qword [rsp + 0x120], r10
movabs r10, 0x3533343333333233
mov qword [rsp + 0x128], r11
movabs r11, 0x3933383337333633
mov qword [rsp + 0x130], r10
movabs r10, 0x3334323431343034
mov qword [rsp + 0x138], r11
movabs r11, 0x3734363435343434
mov qword [rsp + 0x140], r10
movabs r10, 0x3135303539343834
mov qword [rsp + 0x148], r11
movabs r11, 0x3535343533353235
mov qword [rsp + 0x150], r10
movabs r10, 0x3935383537353635
mov qword [rsp + 0x158], r11
movabs r11, 0x3336323631363036
mov qword [rsp + 0x160], r10
movabs r10, 0x3736363635363436
mov qword [rsp + 0x168], r11
movabs r11, 0x3137303739363836
mov qword [rsp + 0x170], r10
movabs r10, 0x3537343733373237
mov qword [rsp + 0x178], r11
movabs r11, 0x3937383737373637
mov qword [rsp + 0x180], r10
movabs r10, 0x3338323831383038
mov qword [rsp + 0x188], r11
movabs r11, 0x3738363835383438
mov qword [rsp + 0x190], r10
movabs r10, 0x3139303939383838
mov qword [rsp + 0x198], r11
movabs r11, 0x3539343933393239
mov qword [rsp + 0x1a8], r11
movabs r11, 0x39393839373936
mov qword [rsp + 0x1a0], r10
movabs r10, 0x3935393439333932
mov qword [rsp + 0x1a9], r10
mov qword [rsp + 0x1b1], r11
mov eax, ebp
mov ecx, ebp
imul rax, rax, 0x51eb851f
shr rax, 0x25
imul r9d, eax, 0x64
sub ecx, r9d
mov r9d, ebp
mov ebp, eax
mov eax, r8d
add ecx, ecx
lea r10d, [rcx + 1]
movzx r10d, byte [rsp + r10 + 0xf0]
mov byte [rdx + rax], r10b
mov eax, ecx
lea r10d, [r8 - 1]
sub r8d, 2
movzx eax, byte [rsp + rax + 0xf0]
mov byte [rdx + r10], al
cmp r9d, 0x270f
ja 0x140002783
cmp r9d, 0x3e7
ja 0x14000308c
add ebp, 0x30
mov byte [rdx], bpl
mov rcx, qword [0x14002fb28]
mov edx, 2
mov r8, qword [rsp + 0x70]
call qword [sym.imp.USER32.dll_SetDlgItemTextA]
mov rcx, qword [rsp + 0x70]
cmp rcx, rsi
je 0x140002818
mov rax, qword [rsp + 0x80]
lea rdx, [rax + 1]
call fcn.140021780
mov rcx, qword [0x14002fb28]
pxor xmm6, xmm6
mov dword [0x14002fb34], 0
call qword [sym.imp.USER32.dll_SetFocus]
mov rcx, qword [0x14002fb28]
lea rdx, section..rdata
call qword [sym.imp.USER32.dll_SetWindowTextA]
mov rsi, qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000286a
movzx eax, word [0x14002fb14]
and eax, dword [0x140023008]
je 0x140002020
mov ecx, 1
call rsi
xor ecx, ecx
mov rdx, rbx
movups xmmword [rbx], xmm6
call sub.XINPUT1_3.dll_XInputGetState
test eax, eax
jne 0x140002020
jmp 0x140002850
mov ecx, dword [0x140023008]
call r12
test ax, ax
je 0x140002020
mov eax, dword [0x14002fae8]
mov rcx, qword [0x14002fb28]
mov dword [0x14002fb34], 1
lea rdx, str.clicking...
mov dword [0x14002fa4c], eax
mov eax, dword [0x14002fad8]
mov dword [0x14002fa48], eax
call qword [sym.imp.USER32.dll_SetWindowTextA]
mov ebp, dword [0x14002fb34]
jmp 0x140001f88
movups xmm6, xmmword [rsp + 0x1c0]
xor eax, eax
add rsp, 0x1d8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov ebx, 0xc
mov ebp, 0xc
jmp 0x140002052
mov ebx, 0x41
mov ebp, 0x41
jmp 0x140002052
mov ebx, 0x10
mov ebp, 0x10
jmp 0x140002052
mov ebx, 0x1b
mov ebp, 0x1b
jmp 0x140002052
mov ebx, 0xa0
mov ebp, 0xa0
jmp 0x140002052
mov ebx, 0xdb
mov ebp, 0xdb
jmp 0x140002052
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
xor ecx, ecx
lea rdx, [0x14002fa60]
call qword [0x14002fa58]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
cmp byte [0x14002fb20], 0
jne 0x1400029f1
mov ecx, dword [0x140023008]
call r12
test ax, ax
setne al
movzx edx, byte [0x14002fb30]
mov byte [0x14002fa50], al
test dl, dl
jne 0x1400029a2
test al, al
je 0x140002a22
movzx eax, al
add eax, edx
cmp eax, 1
je 0x140002a4e
call fcn.140001680
mov ebp, dword [0x14002fb34]
jmp 0x140001f88
mov ebx, 0xf6
mov ebp, 0xf6
jmp 0x140002052
mov ebx, 0xfb
mov ebp, 0xfb
jmp 0x140002052
mov edx, 6
call r14
mov ebp, dword [0x14002fb34]
jmp 0x140001f88
pxor xmm0, xmm0
xor ecx, ecx
lea rdx, [0x14002fb10]
movups xmmword [0x14002fb10], xmm0
call sub.XINPUT1_3.dll_XInputGetState
test eax, eax
je 0x140002cf3
cmp byte [0x14002fb30], 0
mov byte [0x14002fa50], 0
jne 0x140002a4e
mov rcx, qword [0x14002fb28]
mov edx, 1
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002d13
mov byte [0x14002fb30], 1
mov ebp, dword [0x14002fb34]
jmp 0x140001f88
lea rcx, [rsp + 0x60]
call r15
mov rax, qword [rsp + 0x60]
mov edx, dword [0x14002fa4c]
mov rcx, rax
sub rcx, qword [rsp + 0x68]
cmp rcx, rdx
jle 0x140002020
mov qword [rsp + 0x68], rax
mov eax, dword [0x14002fad8]
test eax, eax
je 0x140002a8e
sub dword [0x14002fa48], 1
je 0x140002d4f
mov r10d, dword [0x14002fac8]
test r10d, r10d
jne 0x140002e2e
mov eax, dword [section..data]
cmp eax, 4
je 0x140002e1e
ja 0x140002db1
cmp eax, 1
je 0x140002d26
cmp eax, 2
jne 0x140002d59
mov dword [rsp + 0xd4], 0x18
jmp 0x140002d31
movzx eax, word [0x14002fb14]
and eax, dword [0x140023008]
jne 0x140002893
jmp 0x140002020
mov edx, 2
mov rcx, rdi
add ebp, ebp
call fcn.14001d960
mov rcx, qword [rsp + 0x70]
movabs rax, 0x3330323031303030
movabs rdx, 0x3730363035303430
mov qword [rsp + 0xf0], rax
movabs rax, 0x3131303139303830
mov qword [rsp + 0xf8], rdx
movabs rdx, 0x3531343133313231
mov qword [rsp + 0x100], rax
movabs rax, 0x3931383137313631
mov qword [rsp + 0x108], rdx
movabs rdx, 0x3332323231323032
mov qword [rsp + 0x110], rax
movabs rax, 0x3732363235323432
mov qword [rsp + 0x118], rdx
movabs rdx, 0x3133303339323832
mov qword [rsp + 0x120], rax
movabs rax, 0x3533343333333233
mov qword [rsp + 0x128], rdx
movabs rdx, 0x3933383337333633
mov qword [rsp + 0x130], rax
movabs rax, 0x3334323431343034
mov qword [rsp + 0x138], rdx
movabs rdx, 0x3734363435343434
mov qword [rsp + 0x140], rax
movabs rax, 0x3135303539343834
mov qword [rsp + 0x148], rdx
movabs rdx, 0x3535343533353235
mov qword [rsp + 0x150], rax
movabs rax, 0x3935383537353635
mov qword [rsp + 0x158], rdx
movabs rdx, 0x3336323631363036
mov qword [rsp + 0x160], rax
movabs rax, 0x3736363635363436
mov qword [rsp + 0x168], rdx
movabs rdx, 0x3137303739363836
mov qword [rsp + 0x170], rax
movabs rax, 0x3537343733373237
mov qword [rsp + 0x178], rdx
movabs rdx, 0x3937383737373637
mov qword [rsp + 0x180], rax
movabs rax, 0x3338323831383038
mov qword [rsp + 0x188], rdx
movabs rdx, 0x3738363835383438
mov qword [rsp + 0x190], rax
movabs rax, 0x3139303939383838
mov qword [rsp + 0x198], rdx
movabs rdx, 0x3539343933393239
mov qword [rsp + 0x1a0], rax
movabs rax, 0x3935393439333932
mov qword [rsp + 0x1a8], rdx
movabs rdx, 0x39393839373936
mov qword [rsp + 0x1a9], rax
lea eax, [rbp + 1]
mov qword [rsp + 0x1b1], rdx
movzx eax, byte [rsp + rax + 0xf0]
movzx ebp, byte [rsp + rbp + 0xf0]
mov byte [rcx + 1], al
jmp 0x14000239d
movzx eax, word [0x14002fb14]
and eax, dword [0x140023008]
setne al
jmp 0x140002989
mov dword [0x140023008], ebp
jmp 0x140002147
movzx eax, byte [0x14002fa50]
movzx edx, byte [0x14002fb30]
jmp 0x1400029a2
mov dword [rsp + 0xd4], 6
lea rdx, [rsp + 0xc0]
mov r8d, 0x28
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
jmp 0x140002020
call fcn.140001680
jmp 0x140002a8e
lea rsi, [rsp + 0x90]
mov r8d, 0x28
mov rbx, qword [sym.imp.USER32.dll_SendInput]
mov ecx, 1
mov rdx, rsi
mov word [rsp + 0x98], ax
call rbx
mov r8d, 0x28
mov rdx, rsi
mov ecx, 1
mov dword [rsp + 0x9c], 2
call rbx
mov ebp, dword [0x14002fb34]
mov dword [rsp + 0x9c], 0
jmp 0x140001f88
lea edx, [rax - 5]
cmp edx, 1
ja 0x140002d59
sub eax, 4
lea rsi, [rsp + 0xc0]
mov ecx, 1
mov rbx, qword [sym.imp.USER32.dll_SendInput]
mov r8d, 0x28
mov rdx, rsi
mov dword [rsp + 0xd0], eax
mov dword [rsp + 0xd4], pe_nt_image_headers64
call rbx
mov r8d, 0x28
mov rdx, rsi
mov ecx, 1
mov dword [rsp + 0xd4], 0x100
call rbx
mov ebp, dword [0x14002fb34]
mov dword [rsp + 0xd0], 0
jmp 0x140001f88
mov dword [rsp + 0xd4], 0x60
jmp 0x140002d31
call fcn.140001450
lea r8d, [r10 + r10]
lea r11d, [r8 + 1]
mov ecx, eax
imul rcx, r11
cmp ecx, r11d
jae 0x140002e67
mov eax, r8d
xor edx, edx
not eax
div r11d
mov r8d, edx
cmp ecx, edx
jae 0x140002e67
call fcn.140001450
mov ecx, eax
imul rcx, r11
cmp ecx, r8d
jb 0x140002e57
mov eax, dword [0x14002fae8]
shr rcx, 0x20
sub eax, r10d
add eax, ecx
mov dword [0x14002fa4c], eax
jmp 0x140002a9e
mov eax, 0x40
mov ebp, 0x40
lea rdi, [rsp + 0x70]
mov edx, 2
xor r8d, r8d
mov dword [0x140023008], eax
lea rsi, [rsp + 0x80]
mov rcx, rdi
mov qword [rsp + 0x70], rsi
call fcn.14001d960
mov rdx, qword [rsp + 0x70]
movabs r10, 0x3330323031303030
movabs r11, 0x3730363035303430
mov qword [rsp + 0xf0], r10
movabs r10, 0x3131303139303830
mov qword [rsp + 0xf8], r11
movabs r11, 0x3531343133313231
mov qword [rsp + 0x100], r10
movabs r10, 0x3931383137313631
mov qword [rsp + 0x108], r11
movabs r11, 0x3332323231323032
mov qword [rsp + 0x110], r10
movabs r10, 0x3732363235323432
mov qword [rsp + 0x118], r11
movabs r11, 0x3133303339323832
mov qword [rsp + 0x120], r10
movabs r10, 0x3533343333333233
mov qword [rsp + 0x128], r11
movabs r11, 0x3933383337333633
mov qword [rsp + 0x130], r10
movabs r10, 0x3334323431343034
mov qword [rsp + 0x138], r11
movabs r11, 0x3734363435343434
mov qword [rsp + 0x140], r10
movabs r10, 0x3135303539343834
mov qword [rsp + 0x148], r11
movabs r11, 0x3535343533353235
mov qword [rsp + 0x150], r10
movabs r10, 0x3935383537353635
mov qword [rsp + 0x158], r11
movabs r11, 0x3336323631363036
mov qword [rsp + 0x160], r10
movabs r10, 0x3736363635363436
mov qword [rsp + 0x168], r11
movabs r11, 0x3137303739363836
mov qword [rsp + 0x170], r10
movabs r10, 0x3537343733373237
mov qword [rsp + 0x178], r11
movabs r11, 0x3937383737373637
mov qword [rsp + 0x180], r10
movabs r10, 0x3338323831383038
mov qword [rsp + 0x188], r11
movabs r11, 0x3738363835383438
mov qword [rsp + 0x190], r10
movabs r10, 0x3139303939383838
mov qword [rsp + 0x198], r11
movabs r11, 0x3539343933393239
mov qword [rsp + 0x1a8], r11
movabs r11, 0x39393839373936
mov qword [rsp + 0x1a0], r10
movabs r10, 0x3935393439333932
mov qword [rsp + 0x1a9], r10
mov qword [rsp + 0x1b1], r11
add ebp, ebp
lea eax, [rbp + 1]
movzx ebp, byte [rsp + rbp + 0xf0]
movzx eax, byte [rsp + rax + 0xf0]
mov byte [rdx + 1], al
jmp 0x1400027e3
mov rcx, rdi
mov edx, 1
call fcn.14001d960
mov rcx, qword [rsp + 0x70]
jmp 0x14000239a
mov eax, 0x2000
mov ebp, 0x2000
mov dword [0x140023008], eax
mov edx, 4
jmp 0x140002585
mov eax, 0x1000
mov ebp, 0x1000
jmp 0x1400030ca
mov eax, 0x800
mov ebp, 0x800
jmp 0x1400030ca
mov eax, 0x400
mov ebp, 0x400
jmp 0x1400030ca
mov eax, 0x200
mov ebp, 0x200
mov dword [0x140023008], eax
mov edx, 3
jmp 0x140002585
mov eax, 0x100
mov ebp, 0x100
jmp 0x140003108
mov eax, pe_nt_image_headers64
mov ebp, pe_nt_image_headers64
jmp 0x140003108
mov eax, 0x20
mov ebp, 0x20
jmp 0x140002e8b
mov eax, 0x10
mov ebp, 0x10
jmp 0x140002e8b
mov eax, 8
mov ebp, 8
lea rdi, [rsp + 0x70]
mov edx, 1
xor r8d, r8d
mov dword [0x140023008], eax
lea rsi, [rsp + 0x80]
mov rcx, rdi
mov qword [rsp + 0x70], rsi
call fcn.14001d960
mov rdx, qword [rsp + 0x70]
jmp 0x1400027e0
mov eax, 4
mov ebp, 4
jmp 0x140003158
mov eax, 2
jmp 0x140003158
mov eax, 1
mov ebp, 1
jmp 0x140003158
push rdi
push rsi
push rbx
sub rsp, 0x90
xor esi, esi
call fcn.14000dcf0
call sub.api_ms_win_crt_runtime_l1_1_0.dll___p__acmdln
mov rbx, qword [rax]
test rbx, rbx
jne 0x14002242b
jmp 0x1400224a1
test cl, cl
je 0x140022458
and esi, 1
je 0x140022440
mov esi, 1
call sub.api_ms_win_crt_multibyte_l1_1_0.dll__ismbblead
test eax, eax
je 0x140022427
cmp byte [rbx + 1], 1
sbb rbx, 0xffffffffffffffff
add rbx, 1
movsx ecx, byte [rbx]
cmp cl, 0x20
jle 0x140022408
mov eax, esi
xor eax, 1
cmp cl, 0x22
cmove esi, eax
jmp 0x140022416
test cl, cl
je 0x140022458
nop dword [rax]
movzx eax, byte [rbx + 1]
add rbx, 1
test al, al
je 0x140022458
cmp al, 0x20
jle 0x140022448
lea rdx, [rsp + 0x20]
xor eax, eax
mov ecx, 0xd
mov rdi, rdx
rep stosq qword [rdi], rax
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_GetStartupInfoA]
mov r9d, 0xa
test byte [rsp + 0x5c], 1
je 0x140022486
movzx r9d, word [rsp + 0x60]
mov rcx, qword [0x140026be0]
mov r8, rbx
xor edx, edx
add rsp, 0x90
pop rbx
pop rsi
pop rdi
jmp 0x140001990
lea rbx, [0x140026390]
jmp 0x140022458