Function at 0x1400d82c0
Capabilities:
Log keystrokes via polling

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x580
lea rdx, [0x1401065b8]
lea rcx, [rsp + 0x440]
call fcn.1400ad020
lea rcx, [rsp + 0x440]
call fcn.1400b7020
lea rcx, [rsp + 0x440]
call fcn.1400b02b0
lea rcx, [rsp + 0x148]
call fcn.1400b6a20
lea rdx, [0x14010440a]
lea rcx, [rsp + 0x148]
call fcn.1400814b0
movzx eax, al
test eax, eax
je 0x1400d8346
lea rdx, str.HTTP_request_for_latest_version_failed_
lea rcx, [rsp + 0x148]
call fcn.1400b1160
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x500]
call fcn.1400be1c0
mov rdx, rax
lea rcx, [rsp + 0x148]
call fcn.1400b1040
lea rcx, [rsp + 0x500]
call fcn.1400b02b0
lea rdx, str.2.9.0
lea rcx, [rsp + 0x1e8]
call fcn.1400ad020
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x148]
call fcn.140081480
movzx eax, al
test eax, eax
jne 0x1400d85dc
movzx eax, byte [0x140145c85]
test eax, eax
jne 0x1400d85dc
lea rcx, [rsp + 0x80]
call fcn.14004e540
mov qword [rsp + 0x178], rax
lea rdx, [rsp + 0x428]
lea rcx, [rsp + 0x148]
call fcn.1400ce090
mov rax, qword [rax]
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x168]
mov qword [rsp + 0x180], rax
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x148]
call fcn.1400c94d0
mov rax, qword [rax]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x188], rax
mov r9, qword [rsp + 0x178]
mov r8, qword [rsp + 0x180]
mov rdx, qword [rsp + 0x188]
lea rcx, [rsp + 0x480]
call fcn.140080140
lea rcx, [rsp + 0x81]
call fcn.14004e540
mov qword [rsp + 0x1a0], rax
lea rdx, [rsp + 0x430]
lea rcx, [rsp + 0x1e8]
call fcn.1400ce090
mov rax, qword [rax]
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x1a8], rax
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x1e8]
call fcn.1400c94d0
mov rax, qword [rax]
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x1b0], rax
mov r9, qword [rsp + 0x1a0]
mov r8, qword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x460]
call fcn.140080140
lea r8, [rsp + 0x480]
lea rdx, str.Your_Version_is_Outdated__The_latest_version_is:
lea rcx, [rsp + 0x560]
call fcn.140081b80
lea r8, str.._Your_version_is:
mov rdx, rax
lea rcx, [rsp + 0x540]
call fcn.140081b30
lea r8, [rsp + 0x460]
mov rdx, rax
lea rcx, [rsp + 0x520]
call fcn.140081ae0
lea r8, str..__nDo_you_understand_this__If_you_press_yes__this_wont_show_up_again.
mov rdx, rax
lea rcx, [rsp + 0x4e0]
call fcn.140081b30
lea rcx, [rsp + 0x520]
call fcn.1400b02e0
lea rcx, [rsp + 0x540]
call fcn.1400b02e0
lea rcx, [rsp + 0x560]
call fcn.1400b02e0
lea rcx, [rsp + 0x4e0]
call fcn.1400c97b0
mov r9d, 0x34
lea r8, str.Update_Notification
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov dword [rsp + 0x11c], eax
cmp dword [rsp + 0x11c], 6
jne 0x1400d85b5
mov byte [0x140145c85], 1
lea rcx, [rsp + 0x4e0]
call fcn.1400b02e0
lea rcx, [rsp + 0x460]
call fcn.1400b02e0
lea rcx, [rsp + 0x480]
call fcn.1400b02e0
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x140], rax
lea rdx, str.NtSuspendProcess
mov rcx, qword [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x78], rax
lea rdx, str.NtResumeProcess
mov rcx, qword [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x70], rax
lea rdx, [0x1400bdfb0]
lea rcx, [rsp + 0x418]
call fcn.14007f010
lea rdx, [0x1400b6f60]
lea rcx, [rsp + 0x408]
call fcn.14007f010
lea rdx, [0x1400be090]
lea rcx, [rsp + 0x3f8]
call fcn.14007f010
lea rdx, [0x1400bdee0]
lea rcx, [rsp + 0x3e8]
call fcn.14007f010
lea rdx, [0x1400b6e70]
lea rcx, [rsp + 0x3d8]
call fcn.14007f010
lea rdx, [0x1400be300]
lea rcx, [rsp + 0x3c8]
call fcn.14007f010
lea rdx, [0x1400b8860]
lea rcx, [rsp + 0x1d8]
call fcn.14007f010
call fcn.1400b68e0
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
call fcn.1400b6640
mov qword [rsp + 0x58], rax
mov byte [rsp + 0x42], 0
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x45], 0
mov byte [rsp + 0x43], 0
mov byte [rsp + 0x44], 0
mov byte [rsp + 0x46], 0
mov byte [rsp + 0x47], 0
mov byte [rsp + 0x48], 0
mov byte [rsp + 0x49], 0
mov byte [rsp + 0x4c], 0
mov byte [rsp + 0x4d], 0
mov byte [rsp + 0x4a], 0
mov byte [rsp + 0x4b], 0
lea rcx, [rsp + 0x90]
call fcn.1400d20c0
lea rcx, [rsp + 0x138]
call fcn.1400d20c0
lea rcx, [rsp + 0x238]
call fcn.1400d20c0
movzx eax, byte [0x140145b6f]
test eax, eax
jne 0x1400d9dde
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d8986
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d8986
mov eax, 1
imul rax, rax, 0
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d8986
mov ecx, dword [0x140144e44]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d87a8
mov byte [rsp + 0x4e], 1
jmp 0x1400d87ad
mov byte [rsp + 0x4e], 0
movzx eax, byte [rsp + 0x4e]
mov byte [rsp + 0x41], al
movzx eax, byte [0x140145b82]
test eax, eax
je 0x1400d883e
movzx eax, byte [rsp + 0x41]
test eax, eax
je 0x1400d883c
movzx eax, byte [0x140145c84]
test eax, eax
jne 0x1400d883c
movzx eax, byte [rsp + 0x40]
test eax, eax
jne 0x1400d87eb
mov dword [rsp + 0x84], 1
jmp 0x1400d87f6
mov dword [rsp + 0x84], 0
movzx eax, byte [rsp + 0x84]
mov byte [rsp + 0x40], al
movzx r9d, byte [rsp + 0x40]
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be170
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x1400d883c
lea rcx, [rsp + 0x240]
call fcn.1400d20c0
mov rax, qword [rax]
mov qword [0x140145b70], rax
jmp 0x1400d88aa
movzx eax, byte [rsp + 0x41]
test eax, eax
je 0x1400d8885
movzx eax, byte [rsp + 0x40]
test eax, eax
jne 0x1400d8883
mov r9b, 1
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be170
mov byte [rsp + 0x40], 1
lea rcx, [rsp + 0x248]
call fcn.1400d20c0
mov rax, qword [rax]
mov qword [0x140145b70], rax
jmp 0x1400d88aa
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x1400d88aa
xor r9d, r9d
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be170
mov byte [rsp + 0x40], 0
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x1400d897b
lea rcx, [rsp + 0x250]
call fcn.1400d20c0
lea r8, [0x140145b70]
mov rdx, rax
lea rcx, [rsp + 0x258]
call fcn.140081720
mov rdx, rax
lea rcx, [rsp + 0x260]
call fcn.1400a0da0
mov rcx, rax
call fcn.14008fbb0
mov qword [rsp + 0x1b8], rax
cvtsi2ss xmm0, qword [rsp + 0x1b8]
movss xmm1, dword [0x140134140]
mulss xmm1, dword [0x1400e6f48]
comiss xmm0, xmm1
jb 0x1400d897b
xor r9d, r9d
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be170
lea rdx, [0x140134144]
lea rcx, [rsp + 0x268]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov r9b, 1
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be170
lea rcx, [rsp + 0x270]
call fcn.1400d20c0
mov rax, qword [rax]
mov qword [0x140145b70], rax
movzx eax, byte [rsp + 0x41]
mov byte [0x140145c84], al
mov ecx, dword [0x140144e38]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d89f9
mov rcx, qword [rsp + 0x58]
call fcn.1400b6de0
movzx eax, al
test eax, eax
je 0x1400d89f9
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d89f9
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d89f9
mov eax, 1
imul rax, rax, 1
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d89f9
movzx eax, byte [rsp + 0x42]
test eax, eax
jne 0x1400d89f7
mov dl, 1
lea rcx, [0x140145b87]
call fcn.1400b0f10
mov byte [rsp + 0x42], 1
jmp 0x1400d8a0c
mov byte [rsp + 0x42], 0
xor edx, edx
lea rcx, [0x140145b87]
call fcn.1400b0f10
mov ecx, dword [0x140145d58]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d8aa0
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d8aa0
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d8aa0
mov eax, 1
imul rax, rax, 5
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d8aa0
movzx eax, byte [rsp + 0x43]
test eax, eax
jne 0x1400d8a9e
movzx ecx, word [0x140145c7c]
call fcn.1400b6c00
mov dword [rsp + 0x120], 6
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x278]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
movzx ecx, word [0x140145c7c]
call fcn.1400b8780
mov byte [rsp + 0x43], 1
jmp 0x1400d8aa5
mov byte [rsp + 0x43], 0
mov ecx, dword [0x140144e4c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d8c0e
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d8c0e
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d8c0e
mov eax, 1
imul rax, rax, 6
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d8c0e
movzx eax, byte [rsp + 0x44]
test eax, eax
jne 0x1400d8c0c
movzx eax, byte [0x14013414f]
test eax, eax
je 0x1400d8b1a
mov cx, 0x39
call fcn.1400b6ba0
movzx eax, byte [0x140145b7b]
test eax, eax
je 0x1400d8b38
mov eax, dword [0x140134110]
neg eax
xor edx, edx
mov ecx, eax
call fcn.1400b85f0
jmp 0x1400d8b45
xor edx, edx
mov ecx, dword [0x140134110]
call fcn.1400b85f0
movzx eax, byte [0x140134c54]
test eax, eax
je 0x1400d8bcb
movzx eax, byte [0x140145b7b]
test eax, eax
je 0x1400d8b96
mov dword [rsp + 0x124], 0x4b
lea rdx, [rsp + 0x124]
lea rcx, [rsp + 0x280]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov eax, dword [0x140134114]
neg eax
xor edx, edx
mov ecx, eax
call fcn.1400b85f0
jmp 0x1400d8bcb
mov dword [rsp + 0x128], 0x4b
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x288]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
xor edx, edx
mov ecx, dword [0x140134114]
call fcn.1400b85f0
movzx eax, byte [0x14013414f]
test eax, eax
je 0x1400d8c07
mov dword [rsp + 0x12c], 0x10
lea rdx, [rsp + 0x12c]
lea rcx, [rsp + 0x290]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov cx, 0x39
call fcn.1400b8720
mov byte [rsp + 0x44], 1
jmp 0x1400d8c13
mov byte [rsp + 0x44], 0
mov ecx, dword [0x140144e3c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d8dd9
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d8dd9
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d8dd9
mov eax, 1
imul rax, rax, 7
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d8dd9
movzx eax, byte [rsp + 0x45]
test eax, eax
jne 0x1400d8dd7
movzx eax, byte [0x140145b7f]
test eax, eax
je 0x1400d8c8a
mov cx, 0x1e
call fcn.1400b6ba0
jmp 0x1400d8c93
mov cx, 0x20
call fcn.1400b6ba0
mov dword [rsp + 0x98], 0xf
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x298]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov cx, 0x39
call fcn.1400b6ba0
mov dword [rsp + 0x9c], 0x14
lea rdx, [rsp + 0x9c]
lea rcx, [rsp + 0x2a0]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov r9b, 1
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be170
mov dword [rsp + 0xa0], 0x32
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x2a8]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
movzx eax, byte [0x140145b7f]
test eax, eax
je 0x1400d8d41
mov cx, 0x1e
call fcn.1400b8720
jmp 0x1400d8d4a
mov cx, 0x20
call fcn.1400b8720
mov dword [rsp + 0xa4], 0x1f4
lea rdx, [rsp + 0xa4]
lea rcx, [rsp + 0x2b0]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
movzx ecx, word [str.tuw]
call fcn.1400b6ba0
xor r9d, r9d
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be170
mov dword [rsp + 0xa8], 0x32
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x2b8]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
movzx ecx, word [str.tuw]
call fcn.1400b8720
mov cx, 0x39
call fcn.1400b8720
mov byte [rsp + 0x45], 1
jmp 0x1400d8dde
mov byte [rsp + 0x45], 0
mov ecx, dword [0x140145c80]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d8e73
mov rcx, qword [rsp + 0x58]
call fcn.1400b6de0
movzx eax, al
test eax, eax
je 0x1400d8e73
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d8e73
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d8e73
mov eax, 1
imul rax, rax, 3
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d8e73
movzx eax, byte [rsp + 0x46]
test eax, eax
jne 0x1400d8e71
lea rcx, [0x140145ba8]
call fcn.1400b1a80
movzx eax, al
test eax, eax
jne 0x1400d8e56
mov byte [rsp + 0x4f], 1
jmp 0x1400d8e5b
mov byte [rsp + 0x4f], 0
movzx edx, byte [rsp + 0x4f]
lea rcx, [0x140145ba8]
call fcn.1400b0f10
mov byte [rsp + 0x46], 1
jmp 0x1400d8e91
mov byte [rsp + 0x46], 0
movzx eax, byte [0x140145b81]
test eax, eax
je 0x1400d8e91
xor edx, edx
lea rcx, [0x140145ba8]
call fcn.1400b0f10
mov ecx, dword [0x140144e40]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d90cd
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d90cd
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d90cd
mov eax, 1
imul rax, rax, 4
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d90cd
movzx eax, byte [rsp + 0x47]
test eax, eax
jne 0x1400d90cb
movzx eax, byte [0x14013414e]
test eax, eax
je 0x1400d8f08
mov cx, 0x35
call fcn.1400b6ba0
jmp 0x1400d8f14
lea rcx, [0x140144e88]
call fcn.1400b8650
mov dword [rsp + 0xac], 0x32
lea rdx, [rsp + 0xac]
lea rcx, [rsp + 0x2c0]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
movzx eax, byte [0x14013414e]
test eax, eax
je 0x1400d8f50
mov cx, 0x35
call fcn.1400b8720
lea rcx, [0x140144e60]
call fcn.1400b8650
mov dword [rsp + 0xb0], 0x32
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x2c8]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov cx, 0x1c
call fcn.1400b6ba0
mov dword [rsp + 0xb4], 0x23
lea rdx, [rsp + 0xb4]
lea rcx, [rsp + 0x2d0]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov cx, 0x1c
call fcn.1400b8720
cmp dword [0x140145b68], 2
jne 0x1400d8fc9
jmp 0x1400d8ff1
mov dword [rsp + 0xb8], 0x41
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x2d8]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
cmp dword [0x140145b68], 0
jne 0x1400d9022
mov dword [rsp + 0xbc], 0x32f
lea rdx, [rsp + 0xbc]
lea rcx, [rsp + 0x2e0]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
cmp dword [0x140145b68], 1
jne 0x1400d9053
mov dword [rsp + 0xc0], 0xaf
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x2e8]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov eax, dword [0x140134128]
inc eax
movzx ecx, ax
call fcn.1400b6ba0
mov eax, dword [0x140134128]
inc eax
movzx ecx, ax
call fcn.1400b8720
mov dword [rsp + 0xc4], 4
lea rdx, [rsp + 0xc4]
lea rcx, [rsp + 0x2f0]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
movzx eax, byte [0x140145b6c]
test eax, eax
jne 0x1400d90b6
mov eax, dword [0x140134128]
inc eax
movzx ecx, ax
call fcn.1400b6ba0
mov eax, dword [0x140134128]
inc eax
movzx ecx, ax
call fcn.1400b8720
mov byte [rsp + 0x47], 1
jmp 0x1400d90d2
mov byte [rsp + 0x47], 0
mov ecx, dword [0x140144e48]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d9321
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d9321
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d9321
mov eax, 1
imul rax, rax, 2
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d9321
movzx eax, byte [rsp + 0x48]
test eax, eax
jne 0x1400d931f
movzx eax, byte [0x140145b80]
test eax, eax
je 0x1400d91a0
mov cx, 0x39
call fcn.1400b6ba0
mov dword [rsp + 0xc8], 0x226
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x2f8]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov cx, 0x11
call fcn.1400b6ba0
mov dword [rsp + 0xcc], 0x44
lea rdx, [rsp + 0xcc]
lea rcx, [rsp + 0x300]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov r9b, 1
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be170
movzx eax, byte [0x140145b7e]
test eax, eax
jne 0x1400d91ea
mov dword [rsp + 0xd0], 0x12c
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x308]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov dword [rsp + 0xd4], 0xc8
lea rdx, [rsp + 0xd4]
lea rcx, [rsp + 0x310]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
movzx eax, byte [0x140145b80]
test eax, eax
je 0x1400d922f
mov cx, 0x39
call fcn.1400b8720
mov cx, 0x11
call fcn.1400b8720
xor r9d, r9d
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
call fcn.1400be170
mov dword [rsp + 0xd8], 8
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x318]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
movzx ecx, word [str.tuw]
call fcn.1400b6ba0
mov dword [rsp + 0xdc], 0x11
lea rdx, [rsp + 0xdc]
lea rcx, [rsp + 0x320]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov dl, 1
lea rcx, [0x140145ba9]
call fcn.1400b0f10
mov dword [rsp + 0xe0], 0x10
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x328]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
movzx ecx, word [str.tuw]
call fcn.1400b8720
mov dword [rsp + 0xe4], 0xf3
lea rdx, [rsp + 0xe4]
lea rcx, [rsp + 0x438]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
xor edx, edx
lea rcx, [0x140145ba9]
call fcn.1400b0f10
mov byte [rsp + 0x48], 1
jmp 0x1400d9326
mov byte [rsp + 0x48], 0
mov ecx, dword [0x140145c74]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d93aa
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d93aa
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d93aa
mov eax, 1
imul rax, rax, 0xb
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d93aa
movzx eax, byte [rsp + 0x49]
test eax, eax
jne 0x1400d93a8
lea rcx, [0x140145baa]
call fcn.1400b1a80
movzx eax, al
test eax, eax
jne 0x1400d938d
mov byte [rsp + 0x50], 1
jmp 0x1400d9392
mov byte [rsp + 0x50], 0
movzx edx, byte [rsp + 0x50]
lea rcx, [0x140145baa]
call fcn.1400b0f10
mov byte [rsp + 0x49], 1
jmp 0x1400d93c8
mov byte [rsp + 0x49], 0
movzx eax, byte [0x140145b84]
test eax, eax
je 0x1400d93c8
xor edx, edx
lea rcx, [0x140145baa]
call fcn.1400b0f10
mov ecx, dword [0x140144e5c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d95bf
mov rcx, qword [rsp + 0x58]
call fcn.1400b6de0
movzx eax, al
test eax, eax
je 0x1400d95bf
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d95bf
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d95bf
mov eax, 1
imul rax, rax, 9
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d95bf
movzx eax, byte [rsp + 0x4a]
test eax, eax
jne 0x1400d95bd
movzx eax, byte [0x14013414e]
test eax, eax
je 0x1400d9454
mov cx, 0x35
call fcn.1400b6ba0
jmp 0x1400d9460
lea rcx, [0x140144e88]
call fcn.1400b8650
mov dword [rsp + 0xe8], 0x19
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x330]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov cx, 0x39
call fcn.1400b6ba0
movzx eax, byte [0x14013414e]
test eax, eax
je 0x1400d94a5
mov cx, 0x35
call fcn.1400b8720
mov dword [rsp + 0xec], 0x19
lea rdx, [rsp + 0xec]
lea rcx, [rsp + 0x338]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
lea rdx, [0x1401067a0]
lea rcx, [rsp + 0x4a0]
call fcn.1400ad020
lea rcx, [rsp + 0x4a0]
call fcn.1400b8650
lea rcx, [rsp + 0x4a0]
call fcn.1400b02b0
mov dword [rsp + 0xf0], 0x19
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x340]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov cx, 0x39
call fcn.1400b8720
mov cx, 0x1c
call fcn.1400b6ba0
mov dword [rsp + 0xf4], 0x11b
lea rdx, [rsp + 0xf4]
lea rcx, [rsp + 0x348]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov cx, 0x39
call fcn.1400b6ba0
movzx ecx, word [str.tuw]
call fcn.1400b6ba0
mov dword [rsp + 0xf8], 0x19
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x350]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
mov cx, 0x39
call fcn.1400b8720
movzx ecx, word [str.tuw]
call fcn.1400b8720
mov cx, 0x1c
call fcn.1400b8720
mov byte [rsp + 0x4a], 1
jmp 0x1400d95c4
mov byte [rsp + 0x4a], 0
mov ecx, dword [0x140145ce0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d97fd
mov rcx, qword [rsp + 0x58]
call fcn.1400b6de0
movzx eax, al
test eax, eax
je 0x1400d97fd
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d97fd
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d97fd
mov eax, 1
imul rax, rax, 0xc
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d97fd
movzx eax, byte [rsp + 0x4b]
test eax, eax
jne 0x1400d97fb
lea rcx, [0x140134c60]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
movsd xmm1, qword [0x14010d088]
divsd xmm1, xmm0
movaps xmm0, xmm1
cvttsd2si eax, xmm0
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x88], 0x1f
mov dword [rsp + 0x68], 0x20
mov dword [rsp + 0x10c], 0x11
movzx eax, byte [0x140145b86]
test eax, eax
je 0x1400d9699
mov eax, dword [rsp + 0x54]
neg eax
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x68], 0x1e
mov eax, dword [rsp + 0x54]
neg eax
xor edx, edx
mov ecx, eax
call fcn.1400b85f0
mov dword [rsp + 0xfc], 0x64
lea rdx, [rsp + 0xfc]
lea rcx, [rsp + 0x358]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
movzx ecx, word [rsp + 0x88]
call fcn.1400b6ba0
mov dword [rsp + 0x100], 0x10
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x360]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
movzx ecx, word [rsp + 0x88]
call fcn.1400b8720
movzx ecx, word [rsp + 0x68]
call fcn.1400b6ba0
xor edx, edx
mov ecx, dword [rsp + 0x54]
call fcn.1400b85f0
mov dword [rsp + 0x104], 0xbd6
lea rdx, [rsp + 0x104]
lea rcx, [rsp + 0x368]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c70
movzx ecx, word [rsp + 0x68]
call fcn.1400b8720
movzx eax, byte [0x140134c56]
test eax, eax
jne 0x1400d9771
movzx eax, byte [0x140134c57]
test eax, eax
jne 0x1400d9771
jmp 0x1400d977a
mov cx, 0x11
call fcn.1400b6ba0
movzx eax, byte [0x140134c56]
test eax, eax
je 0x1400d97eb
xor edx, edx
mov ecx, dword [rsp + 0x54]
call fcn.1400b85f0
mov dword [rsp + 0x108], 0x32
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0x370]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c40
movzx ecx, word [rsp + 0x10c]
call fcn.1400b8720
mov eax, dword [rsp + 0x54]
neg eax
xor edx, edx
mov ecx, eax
call fcn.1400b85f0
movzx eax, byte [0x140134c57]
test eax, eax
je 0x1400d97e9
movzx ecx, word [rsp + 0x68]
call fcn.1400b6ba0
jmp 0x1400d97f6
xor edx, edx
mov ecx, dword [rsp + 0x54]
call fcn.1400b85f0
mov byte [rsp + 0x4b], 1
jmp 0x1400d9802
mov byte [rsp + 0x4b], 0
mov ecx, dword [0x140144e54]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d9897
mov rcx, qword [rsp + 0x58]
call fcn.1400b6de0
movzx eax, al
test eax, eax
je 0x1400d9897
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d9897
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d9897
mov eax, 1
imul rax, rax, 8
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d9897
movzx eax, byte [rsp + 0x4c]
test eax, eax
jne 0x1400d9895
lea rcx, [0x140145bab]
call fcn.1400b1a80
movzx eax, al
test eax, eax
jne 0x1400d987a
mov byte [rsp + 0x51], 1
jmp 0x1400d987f
mov byte [rsp + 0x51], 0
movzx edx, byte [rsp + 0x51]
lea rcx, [0x140145bab]
call fcn.1400b0f10
mov byte [rsp + 0x4c], 1
jmp 0x1400d98b5
mov byte [rsp + 0x4c], 0
movzx eax, byte [0x140145b85]
test eax, eax
je 0x1400d98b5
xor edx, edx
lea rcx, [0x140145bab]
call fcn.1400b0f10
mov ecx, dword [0x140144e58]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d994a
mov rcx, qword [rsp + 0x58]
call fcn.1400b6de0
movzx eax, al
test eax, eax
je 0x1400d994a
movzx eax, byte [0x14013414c]
test eax, eax
je 0x1400d994a
movzx eax, byte [0x14013414d]
test eax, eax
je 0x1400d994a
mov eax, 1
imul rax, rax, 0xa
lea rcx, [0x140135188]
movzx eax, byte [rcx + rax]
test eax, eax
je 0x1400d994a
movzx eax, byte [rsp + 0x4d]
test eax, eax
jne 0x1400d9948
lea rcx, [0x140145bac]
call fcn.1400b1a80
movzx eax, al
test eax, eax
jne 0x1400d992d
mov byte [rsp + 0x52], 1
jmp 0x1400d9932
mov byte [rsp + 0x52], 0
movzx edx, byte [rsp + 0x52]
lea rcx, [0x140145bac]
call fcn.1400b0f10
mov byte [rsp + 0x4d], 1
jmp 0x1400d9968
mov byte [rsp + 0x4d], 0
movzx eax, byte [0x140145b83]
test eax, eax
je 0x1400d9968
xor edx, edx
lea rcx, [0x140145bac]
call fcn.1400b0f10
lea rcx, [rsp + 0x1c0]
call fcn.1400d20c0
lea r8, [rsp + 0x138]
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x378]
call fcn.140081720
mov rdx, rax
lea rcx, [rsp + 0x380]
call fcn.1400a0bd0
mov rcx, rax
call fcn.14008fbb0
cmp rax, 1
jl 0x1400d99f8
xor eax, eax
cmp eax, 1
je 0x1400d99e0
call fcn.1400b68e0
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
call fcn.1400b6640
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x388]
call fcn.1400d20c0
mov rax, qword [rax]
mov qword [rsp + 0x138], rax
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400d9a3b
mov rcx, qword [rsp + 0x58]
call fcn.1400b6de0
movzx eax, al
test eax, eax
je 0x1400d9a3b
lea rcx, [rsp + 0x390]
call fcn.1400d20c0
mov rax, qword [rax]
mov qword [rsp + 0x90], rax
jmp 0x1400d9d68
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400d9d50
movzx eax, byte [0x140134c55]
test eax, eax
je 0x1400d9d50
lea rcx, [rsp + 0x1c8]
call fcn.1400d20c0
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x1c8]
lea rcx, [rsp + 0x398]
call fcn.140081720
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.1400a0a40
mov rcx, rax
call fcn.140033d90
mov dword [rsp + 0x110], eax
cmp dword [rsp + 0x110], 0xf
jl 0x1400d9d4e
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0x130], rax
lea rax, [rsp + 0x208]
mov rdi, rax
xor eax, eax
mov ecx, 0x28
rep stosb byte [rdi], al
mov dword [rsp + 0x208], 0
mov dword [rsp + 0x21c], 2
mov rcx, qword [rsp + 0x58]
call fcn.1400b6de0
movzx eax, al
test eax, eax
jne 0x1400d9cbd
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xfffffffffffffffe
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, 0x28
lea rdx, [rsp + 0x208]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
mov dword [rsp + 0x21c], 4
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, 0x28
lea rdx, [rsp + 0x208]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140144e88]
call fcn.1400b8650
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x34
call fcn.1400b6ba0
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x34
call fcn.1400b8720
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x1c
call fcn.1400b6ba0
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x1c
call fcn.1400b8720
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xfffffffffffffffe
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
lea rcx, [rsp + 0x3a0]
call fcn.1400d20c0
mov rax, qword [rax]
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x58]
call fcn.1400b6de0
movzx eax, al
cmp eax, 1
jne 0x1400d9d4e
lea rcx, [0x140144e88]
call fcn.1400b8650
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x34
call fcn.1400b6ba0
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x34
call fcn.1400b8720
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x1c
call fcn.1400b6ba0
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cx, 0x1c
call fcn.1400b8720
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x3a8]
call fcn.1400d20c0
mov rax, qword [rax]
mov qword [rsp + 0x90], rax
jmp 0x1400d9d68
lea rcx, [rsp + 0x3b0]
call fcn.1400d20c0
mov rax, qword [rax]
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x58]
call fcn.1400b6de0
movzx eax, al
test eax, eax
jne 0x1400d9db1
xor edx, edx
lea rcx, [0x140145bac]
call fcn.1400b0f10
xor edx, edx
lea rcx, [0x140145bab]
call fcn.1400b0f10
xor edx, edx
lea rcx, [0x140145b87]
call fcn.1400b0f10
xor edx, edx
lea rcx, [0x140145ba8]
call fcn.1400b0f10
mov dword [rsp + 0x114], 0x32
lea rdx, [rsp + 0x114]
lea rcx, [rsp + 0x3b8]
call fcn.14007f9f0
mov rcx, rax
call fcn.1400a9c70
jmp 0x1400d8742
lea rdx, str.RMCSettings.json
lea rcx, [rsp + 0x4c0]
call fcn.1400ad020
lea rcx, [rsp + 0x4c0]
call fcn.1400bbb50
lea rcx, [rsp + 0x4c0]
call fcn.1400b02b0
lea rcx, [rsp + 0x1d8]
call fcn.1400d1140
call fcn.1400b6320
call fcn.140050be0
call fcn.140051a80
xor ecx, ecx
call fcn.1400111b0
mov rcx, qword [0x140145bb0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov dword [rsp + 0x118], 0
lea rcx, [rsp + 0x1d8]
call fcn.1400b0e10
lea rcx, [rsp + 0x3c8]
call fcn.1400b0e10
lea rcx, [rsp + 0x3d8]
call fcn.1400b0e10
lea rcx, [rsp + 0x3e8]
call fcn.1400b0e10
lea rcx, [rsp + 0x3f8]
call fcn.1400b0e10
lea rcx, [rsp + 0x408]
call fcn.1400b0e10
lea rcx, [rsp + 0x418]
call fcn.1400b0e10
lea rcx, [rsp + 0x1e8]
call fcn.1400b02b0
lea rcx, [rsp + 0x148]
call fcn.1400b02b0
mov eax, dword [rsp + 0x118]
add rsp, 0x580
pop rdi
ret