Function at 0x14000a288
Capabilities:
Log keystrokes via polling

Disassembly:
sub rsp, 0x28
push 0
pop rcx
call fcn.14001869c
mov r15, rax
add r15, 0x133
mov qword [0x1400c6460], r15
push 0
pop rcx
call fcn.140018710
mov r15, rax
add r15, 0x14f
mov qword [0x1400c6468], r15
sub rsp, 8
push 0xffffffffffff0001
push 0xffffffffffff0001
push qword [0x1400c6468]
push qword [0x1400c6460]
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140018718
add rsp, 0x30
push 0xa
pop rcx
call fcn.140018874
mov rax, rax
mov dword [0x1400c66f0], eax
call fcn.140018a98
mov r15, rax
and r15, r15
jne 0x14000b501
mov qword [0x1400c6470], 0
movsxd r15, dword [0x1400c66f0]
cmp r15, 0x332c
jne 0x14000b44b
call fcn.140018ab4
mov qword [0x1400c6470], rax
mov r15, qword [0x1400c6470]
cmp r15, 1
jne 0x14000a358
jmp 0x14000ce54
mov r15, qword [0x1400c6470]
cmp r15, 3
jne 0x14000a5cb
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001c4d0
and rax, rax
je 0x14000a548
push 1
pop rcx
call fcn.14001c31c
mov rax, rax
push rax
pop rcx
call fcn.14001bc98
push 1
pop rcx
call fcn.14001a604
mov rax, rax
push rax
pop rcx
call fcn.14001bdb0
push 0x11
pop rcx
call fcn.14001bdc4
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001401c
mov rax, rax
push rax
movabs rax, str.Trainer_Instructions.
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001bdd4
call fcn.14001bd50
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001c638
push 0
pop rcx
call fcn.14001c31c
mov rax, rax
push rax
pop rcx
call fcn.14001bc98
push 0
pop rcx
call fcn.14001bdc4
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001401c
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001be8c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001bdc4
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001c4b0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001be54
add rsp, 0x30
call fcn.14001bd50
push 1
pop rcx
call fcn.14001bf00
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001c4b0
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140018550
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cfd8
push qword [0x1400c7100]
sub rsp, 8
push 0
movabs rax, 0x14007302a
push rax
mov rax, qword [0x1400c7100]
push rax
sub rsp, 8
push rax
pop rcx
sub rsp, 0x20
call fcn.14001a624
add rsp, 0x28
movabs rcx, str.help.txt
sub rsp, 0x28
call fcn.14001f570
add rsp, 0x28
inc qword [0x1400c7100]
movabs rax, str.notepad.exe
push rax
mov rdx, qword [0x1400c7110]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140013fcc
add rsp, 0x28
pop qword [0x1400c7100]
mov r15, qword [0x1400c6470]
cmp r15, 4
jne 0x14000a7e5
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001c4d0
and rax, rax
je 0x14000a7bb
push 1
pop rcx
call fcn.14001c31c
mov rax, rax
push rax
pop rcx
call fcn.14001bc98
push 1
pop rcx
call fcn.14001a604
mov rax, rax
push rax
pop rcx
call fcn.14001bdb0
push 0x11
pop rcx
call fcn.14001bdc4
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001401c
mov rax, rax
push rax
movabs rax, 0x140073221
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001bdd4
call fcn.14001bd50
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001c638
push 0
pop rcx
call fcn.14001c31c
mov rax, rax
push rax
pop rcx
call fcn.14001bc98
push 0
pop rcx
call fcn.14001bdc4
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001401c
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001be8c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001bdc4
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001c4b0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001be54
add rsp, 0x30
call fcn.14001bd50
push 1
pop rcx
call fcn.14001bf00
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001c4b0
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140018550
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cfd8
movabs rax, 0x14007302a
push rax
movabs rax, str.www.cheathappens.com_trainer_troubleshooting.asp
push rax
movabs rax, str.iexplore
push rax
pop rcx
pop rdx
pop r8
call fcn.140013fe0
mov r15, qword [0x1400c6470]
cmp r15, 5
jne 0x14000a9ff
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001c4d0
and rax, rax
je 0x14000a9d5
push 1
pop rcx
call fcn.14001c31c
mov rax, rax
push rax
pop rcx
call fcn.14001bc98
push 1
pop rcx
call fcn.14001a604
mov rax, rax
push rax
pop rcx
call fcn.14001bdb0
push 0x11
pop rcx
call fcn.14001bdc4
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001401c
mov rax, rax
push rax
movabs rax, str.Cheathappens_Website.
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001bdd4
call fcn.14001bd50
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001c638
push 0
pop rcx
call fcn.14001c31c
mov rax, rax
push rax
pop rcx
call fcn.14001bc98
push 0
pop rcx
call fcn.14001bdc4
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001401c
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001be8c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001bdc4
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001c4b0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001be54
add rsp, 0x30
call fcn.14001bd50
push 1
pop rcx
call fcn.14001bf00
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001c4b0
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140018550
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cfd8
movabs rax, 0x14007302a
push rax
movabs rax, str.www.cheathappens.com
push rax
movabs rax, str.iexplore
push rax
pop rcx
pop rdx
pop r8
call fcn.140013fe0
mov r15, qword [0x1400c6470]
cmp r15, 6
jne 0x14000ac6a
push 0x120
push 0xdc
push 0x44c
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001c4d0
and rax, rax
je 0x14000abef
push 1
pop rcx
call fcn.14001c31c
mov rax, rax
push rax
pop rcx
call fcn.14001bc98
push 1
pop rcx
call fcn.14001a604
mov rax, rax
push rax
pop rcx
call fcn.14001bdb0
push 0x11
pop rcx
call fcn.14001bdc4
push 0xff
push 0xa
push 0xa
push 0xa
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001401c
mov rax, rax
push rax
movabs rax, str.Cheathappens_Website.
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001bdd4
call fcn.14001bd50
push 0
push 0x64
push 0x1f4
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001c638
push 0
pop rcx
call fcn.14001c31c
mov rax, rax
push rax
pop rcx
call fcn.14001bc98
push 0
pop rcx
call fcn.14001bdc4
sub rsp, 8
sub rsp, 8
push 0xff
push 0x2f
push 0xa2
push 0xf2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001401c
add rsp, 0x28
mov rax, rax
push rax
push 0x18
push 0x202
push 0x1c2
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001be8c
add rsp, 0x30
push 0x11
pop rcx
call fcn.14001bdc4
sub rsp, 8
push 0x64
push 0x1f4
push 0x1c5
push 5
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001c4b0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001be54
add rsp, 0x30
call fcn.14001bd50
push 1
pop rcx
call fcn.14001bf00
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001c4b0
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140018550
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cfd8
push qword [0x1400c7100]
sub rsp, 8
movabs rax, 0x14007302a
push rax
push qword [0x1400c7100]
movabs rcx, str.http:__www.cheathappens.com_cheat_index.asp_titleID
sub rsp, 0x20
call fcn.14001f570
add rsp, 0x20
mov rcx, qword [0x1400c5ed8]
sub rsp, 0x20
call fcn.14001f570
add rsp, 0x20
inc qword [0x1400c7100]
movabs rax, str.iexplore
push rax
mov rdx, qword [0x1400c7110]
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140013fe0
add rsp, 0x28
pop qword [0x1400c7100]
mov r15, qword [0x1400c6470]
cmp r15, 7
jne 0x14000ac9c
mov rbp, qword [0x1400c6a90]
mov r15, qword [rbp + 8]
and r15, r15
je 0x14000ac9c
mov r15, qword [0x1400c6478]
and r15, r15
jne 0x14000ac9c
mov rax, 1
jmp 0x14000ac9f
xor rax, rax
and rax, rax
je 0x14000b44b
push 0
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140018ad0
add rsp, 0x28
mov qword [rsp - 8], rax
fild qword [rsp - 8]
fadd qword [0x1400737f4]
fdiv qword [str.fffff]
sub rsp, 8
fstp qword [rsp]
movsd xmm0, qword [rsp]
add rsp, 8
pop rdx
call fcn.140014440
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fadd qword [0x140073804]
fistp qword [0x1400c6480]
mov r15, qword [0x1400c6480]
and r15, r15
jle 0x14000ad2a
mov r15, qword [0x1400c6480]
cmp r15, qword [0x1400c5ef8]
jge 0x14000ad2a
mov rax, 1
jmp 0x14000ad2d
xor rax, rax
and rax, rax
je 0x14000b141
push 1
movabs rax, 0x14007314a
push rax
mov r15, qword [0x1400c6480]
inc r15
mov rbp, qword [0x1400c6a60]
shl r15, 3
push qword [r15 + rbp]
pop rcx
pop rdx
pop r8
call fcn.140010f50
mov qword [0x1400c6488], rax
mov r15, qword [0x1400c6480]
inc r15
shl r15, 3
push qword [r15 + rbp]
pop rcx
call fcn.140010270
mov qword [0x1400c6490], rax
mov r15, qword [0x1400c6490]
sub r15, qword [0x1400c6488]
mov qword [0x1400c6498], r15
push 5
pop rcx
call fcn.140012ba0
push 0x12c
pop rcx
call fcn.140014038
mov qword [0x1400c5f00], 0
mov rax, 0xff
cmp rax, qword [0x1400c5f00]
jl 0x14000adf0
push qword [0x1400c5f00]
pop rcx
call sub.USER32.DLL_GetAsyncKeyState
mov qword [0x1400c5fc0], rax
inc qword [0x1400c5f00]
jno 0x14000adc4
mov qword [0x1400c5fc0], 0
mov qword [0x1400c64a0], 0
mov qword [0x1400c5f00], 3
mov rax, 0xff
cmp rax, qword [0x1400c5f00]
jl 0x14000ae57
push qword [0x1400c5f00]
pop rcx
call sub.USER32.DLL_GetAsyncKeyState
mov qword [0x1400c5fc0], rax
mov r15, qword [0x1400c5fc0]
and r15, r15
je 0x14000ae4e
mov rax, qword [0x1400c5f00]
mov qword [0x1400c64a0], rax
inc qword [0x1400c5f00]
jno 0x14000ae11
mov r15, qword [0x1400c64a0]
and r15, r15
jle 0x14000adb9
mov r15, qword [0x1400c64a0]
cmp r15, 0x1b
jne 0x14000b05b
movabs rdx, 0x14007302a
lea rcx, [0x1400c5ee8]
call fcn.14001f5e0
movabs rdx, 0x14007302a
lea rcx, [0x1400c5ef0]
call fcn.14001f5e0
mov qword [0x1400c5ef8], 0
push qword [0x1400c7100]
sub rsp, 8
mov rcx, qword [0x1400c5ee0]
push qword [0x1400c7100]
sub rsp, 0x28
call fcn.14001f570
add rsp, 0x28
movabs rcx, str.Options
sub rsp, 0x28
call fcn.14001f570
add rsp, 0x28
inc qword [0x1400c7100]
push 0xa
mov rdx, qword [0x1400c7110]
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001ae80
add rsp, 0x28
pop qword [0x1400c7100]
mov rax, qword [0x1400c7100]
push rax
sub rsp, 8
push rax
push 0xa
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001b100
add rsp, 0x28
movabs rcx, 0x14007309e
sub rsp, 0x28
call fcn.14001f570
add rsp, 0x28
lea rcx, [0x1400c5ee8]
pop rdx
call fcn.14001f4b0
mov rax, qword [0x1400c7100]
push rax
sub rsp, 8
push rax
push 0xa
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001b100
add rsp, 0x28
lea rcx, [0x1400c5ef0]
pop rdx
call fcn.14001f4b0
mov rax, qword [0x1400c7100]
push rax
sub rsp, 8
push rax
push 0xa
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14001b100
add rsp, 0x28
mov r15, qword [0x1400c5ef8]
inc r15
mov rbp, qword [0x1400c6a60]
shl r15, 3
lea rcx, [r15 + rbp]
pop rdx
call fcn.14001f4b0
inc qword [0x1400c5ef8]
push 0xa
pop rcx
call fcn.14001b270
mov r15, rax
cmp r15, 1
jne 0x14000af8a
push 0xa
pop rcx
call fcn.14001a960
push 1
pop rcx
call fcn.140012ba0
push 0x12c
pop rcx
call fcn.140014038
mov qword [0x1400c5f00], 1
mov rax, 0x14
cmp rax, qword [0x1400c5f00]
jl 0x14000b056
mov r15, qword [0x1400c5f00]
mov rbp, qword [0x1400c6ad0]
shl r15, 3
push qword [r15 + rbp]
mov r15, qword [0x1400c5f00]
mov rbp, qword [0x1400c6a90]
shl r15, 3
pop qword [r15 + rbp]
inc qword [0x1400c5f00]
jno 0x14000b011
jmp 0x14000b141
push 0x64
pop rcx
call fcn.140014038
push qword [0x1400c7100]
movabs rcx, 0x140073527
sub rsp, 0x28
call fcn.14001f570
add rsp, 0x28
mov r15, qword [0x1400c64a0]
mov rbp, qword [0x1400c6a70]
shl r15, 3
mov rcx, qword [r15 + rbp]
sub rsp, 0x28
call fcn.14001f570
add rsp, 0x28
movabs rcx, 0x14007314a
sub rsp, 0x28
call fcn.14001f570
add rsp, 0x28
mov rdx, qword [0x1400c7100]
push rdx
push rdx
push qword [0x1400c6498]
mov r15, qword [0x1400c6480]
inc r15
mov rbp, qword [0x1400c6a60]
shl r15, 3
push qword [r15 + rbp]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140010800
add rsp, 0x20
pop rax
mov r15, qword [0x1400c6480]
inc r15
shl r15, 3
lea rcx, [r15 + rbp]
pop rdx
call fcn.14001f4b0
push qword [0x1400c64a0]
mov r15, qword [0x1400c6480]
mov rbp, qword [0x1400c6a90]
shl r15, 3
pop qword [r15 + rbp]
push 0
pop rcx
call fcn.140012ba0
push 0x12c
pop rcx
call fcn.140014038
push 0x120
fld dword [0x1400c6708]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
fld dword [0x1400c6704]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001c4d0
and rax, rax
je 0x14000b44b
push 0
pop rcx
call fcn.14001c31c
mov rax, rax
push rax
pop rcx
call fcn.14001bc98
push 0
pop rcx
call fcn.14001bdc4
sub rsp, 8
sub rsp, 8
push 0xff
push 0x44
push 0x44
push 0x44
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001401c
add rsp, 0x28
mov rax, rax
push rax
push 0x10e
push 0x12b
push 0x41
push 2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001be8c
add rsp, 0x30
call fcn.14001bd50
push 1
pop rcx
call fcn.14001c31c
mov rax, rax
push rax
pop rcx
call fcn.14001bc98
push 1
pop rcx
call fcn.14001a604
mov rax, rax
push rax
pop rcx
call fcn.14001bdb0
push 0x11
pop rcx
call fcn.14001bdc4
mov qword [0x1400c5f00], 1
mov rax, qword [0x1400c5ef8]
cmp rax, qword [0x1400c5f00]
jl 0x14000b2b9
push 0xff
push 0
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001401c
mov rax, rax
push rax
mov r15, qword [0x1400c5f00]
mov rbp, qword [0x1400c6a60]
shl r15, 3
push qword [r15 + rbp]
mov r15, qword [0x1400c5f00]
imul r15, r15, 0x1a
add r15, 0xffffffffffffffe8
mov rax, r15
push rax
push 2
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001bdd4
inc qword [0x1400c5f00]
jno 0x14000b244
mov qword [0x1400c5f00], 1
mov rax, qword [0x1400c5ef8]
cmp rax, qword [0x1400c5f00]
jl 0x14000b339
push 0xff
push 0xff
push 0xff
push 0xff
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001401c
mov rax, rax
push rax
mov r15, qword [0x1400c5f00]
mov rbp, qword [0x1400c6a60]
shl r15, 3
push qword [r15 + rbp]
mov r15, qword [0x1400c5f00]
imul r15, r15, 0x1a
add r15, 0xffffffffffffffe6
mov rax, r15
push rax
push 0
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001bdd4
inc qword [0x1400c5f00]
jno 0x14000b2c4
call fcn.14001bd50
push 0
fld dword [0x1400c6710]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
fld dword [0x1400c670c]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
push 1
pop rcx
pop rdx
pop r8
pop r9
call fcn.14001c638
push 0
pop rcx
call fcn.14001c31c
mov rax, rax
push rax
pop rcx
call fcn.14001bc98
push 0x11
pop rcx
call fcn.14001bdc4
sub rsp, 8
fld dword [0x1400c6710]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
fld dword [0x1400c670c]
fistp qword [rsp - 8]
mov rax, qword [rsp - 8]
mov rax, rax
push rax
push 0x43
push 7
sub rsp, 8
push 1
pop rcx
sub rsp, 0x20
call fcn.14001c4b0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14001be54
add rsp, 0x30
call fcn.14001bd50
push 1
pop rcx
call fcn.14001bf00
push 0xff
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.14001c4b0
add rsp, 0x28
mov rax, rax
push rax
push 0
pop rcx
sub rsp, 0x20
call fcn.140018550
add rsp, 0x20
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call fcn.14000cfd8
movsxd r15, dword [0x1400c66f0]
cmp r15, 0x201
jne 0x14000b501
sub rsp, 8
push 0xffffffffffff0001
push 0xffffffffffff0001
push 0
push 0xfffffffffffffc18
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140018718
add rsp, 0x30
call fcn.140018ab4
mov qword [0x1400c6470], rax
mov r15, qword [0x1400c6470]
cmp r15, 2
jne 0x14000b4a8
push 0
pop rcx
call fcn.140018b50
mov qword [0x1400c64a8], rax
push 0
pop rcx
call fcn.140018ad0
mov qword [0x1400c64b0], rax
push 0
push 2
push 0xa1
sub rsp, 8
push 0
pop rcx
sub rsp, 0x20
call fcn.140018550
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.DLL_SendMessageA
call sub.KERNEL32.dll_IsDebuggerPresent
and rax, rax
je 0x14000b511
push 0x55009553
ret
add rsp, 0x28
ret