Function at 0x1400db620
Capabilities:
Create thread
Log keystrokes via polling
Terminate process

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov rax, qword [0x1402215c0]
xor rax, rsp
mov qword [rbp + 0x160], rax
lea rcx, [0x1400db590]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1401a69b8
xor edi, edi
lea rcx, str..CarMetrics
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], edi
mov edx, 0xc0000000
mov qword [rax], rdi
mov rbx, rax
lea r8d, [rdi + 3]
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], rdi
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbx], rax
cmp rax, 0xffffffffffffffff
jne 0x1400db6ab
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movabs rdx, 0x3c3c86f048ad114
mov qword [0x140244fb8], rbx
movabs rcx, 0x1dd70e4a3072117
movabs r8, 0x1e31228b353c6f
call fcn.1400e6e40
movabs rdx, 0x2ccea3dc5a858df
mov qword [rbp], rax
movabs rcx, 0x12e1797732825ef
movabs r8, 0x35fdb0cea1898e
call fcn.1400e6e40
movabs rdx, 0x3da4863129ea028
mov qword [rbp + 8], rax
movabs rcx, 0x2281c1070061f39
movabs r8, 0x204c4137fb4c0c
call fcn.1400e6e40
movabs rdx, 0x163c0cec2b5445f
mov qword [rbp + 0x10], rax
movabs rcx, 0x3c0df650b5875ae
movabs r8, 0x1754313c98627d
call fcn.1400e6e40
mov rcx, qword [rbx]
lea r8, [rbp]
mov qword [rsp + 0x38], rdi
mov r9d, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x18], rax
mov edx, 0x222558
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400db78b
mov eax, 0xfffffff6
jmp 0x1400dd038
call fcn.1400d9b10
test al, al
jne 0x1400db79e
mov eax, 0xfffffff7
jmp 0x1400dd038
cmp qword [0x14023f5c0], rdi
jne 0x1400db7b1
mov eax, 0xfffffff8
jmp 0x1400dd038
mov qword [rsp + 0x2b0], r13
mov r13d, 1
mov ecx, r13d
call fcn.1401a69b8
lea rcx, [rbp - 8]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x1400f86d0]
xor ecx, ecx
mov dword [rsp + 0x20], edi
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x10], rax
test rax, rax
je 0x1400dd0bd
mov qword [rsp + 0x2a0], rsi
mov qword [rsp + 0x2a8], r12
mov qword [rsp + 0x278], r14
mov qword [rsp + 0x270], r15
cmp dword [rbp - 8], edi
je 0x1400dd0b3
movaps xmm0, xmmword [rbp - 0x10]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400dd0b3
xorps xmm0, xmm0
mov ecx, 0x1f4
movdqa xmmword [rbp - 0x10], xmm0
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x14023f5b8], dil
jne 0x1400db9f4
movabs rbx, 0xfffffffffffd
movabs r15, 0xffff800fffffffff
movabs r12, 0xffffffffd
movabs r14, 0xfffffffffd
mov rsi, qword [0x140244fb8]
cmp qword [rsi], 0xffffffffffffffff
je 0x1400db96a
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
lea ecx, [rax + 0xf]
call fcn.1401a6a28
mov rbx, rax
mov qword [rsp + 0x38], rdi
mov r9d, reloc.WS2_32.dll_recv
mov r8, rbx
mov edx, 0x222040
mov dword [rax], 0x74737552
mov dword [rax + 4], 0x65696c43
mov dword [rax + 8], 0x652e746e
mov word [rax + 0xc], 0x6578
mov byte [rax + 0xe], dil
lea rax, [rbp - 0x80]
mov rcx, qword [rsi]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov dword [rsp + 0x28], Ordinal_30
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, rbx
call fcn.1401a685c
mov r8, qword [rsp + 0x60]
movabs rax, 0xffffffffffff
add rax, r8
movabs rcx, 0xfffffffffffd
cmp rax, rcx
ja 0x1400db960
mov rdx, qword [rsp + 0x68]
lea rax, [rdx + r15]
cmp rax, r12
ja 0x1400db960
mov rcx, qword [rsp + 0x70]
lea rax, [rcx - 1]
cmp rax, r14
ja 0x1400db960
mov qword [rsi + 0x18], r8
movabs rbx, 0xfffffffffffd
mov qword [rsi + 8], rdx
mov qword [rsi + 0x10], rcx
jmp 0x1400db973
movabs rbx, 0xfffffffffffd
mov r8, rdi
mov rdx, rdi
mov rcx, rdi
movabs rax, 0xffffffffffff
add rax, r8
cmp rax, rbx
ja 0x1400db997
lea rax, [rdx + r15]
cmp rax, r12
ja 0x1400db997
lea rax, [rcx - 1]
cmp rax, r14
jbe 0x1400db9b1
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x14023f5b8], dil
je 0x1400db883
jmp 0x1400db9f4
cmp byte [0x14023f5b8], dil
jne 0x1400db9f4
nop word [rax + rax]
mov rdx, qword [0x140243f98]
mov rcx, qword [0x140243fa0]
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x14023f590], rax
test rax, rax
jne 0x1400db9f4
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x14023f5b8], dil
je 0x1400db9c0
mov rdx, qword [0x140243f70]
call fcn.140062480
mov qword [0x14023f5c8], rax
test rax, rax
jne 0x1400dba14
lea edi, [rax - 7]
jmp 0x1400dd008
mov rdx, qword [0x140243f78]
call fcn.140062480
mov qword [0x14023f5d0], rax
test rax, rax
jne 0x1400dba34
lea edi, [rax - 6]
jmp 0x1400dd008
cmp byte [0x14023f5b8], dil
jne 0x1400dbb13
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x3482638
call fcn.1400e6b80
mov edx, 2
mov qword [rbp - 0x80], reloc.SHLWAPI.dll_IStream_Read
mov rsi, rax
mov qword [rbp - 0x78], rdi
call fcn.1400ef2a0
mov r8d, reloc.WS2_32.dll_recv
mov qword [rsp + 0x40], rax
lea rdx, [rbp - 0x80]
mov rcx, rax
lea rbx, [rax + 0x10]
mov qword [rsp + 0x50], rbx
call sub.VCRUNTIME140.dll_memmove
lea r8, [rsp + 0x40]
mov qword [rsp + 0x48], rbx
mov rdx, rsi
call fcn.1400e6f10
mov edx, 2
mov qword [rsp + 0x60], rdi
mov rsi, rax
mov qword [rsp + 0x68], reloc.SHLWAPI.dll_IStream_Read
call fcn.1400ef2a0
mov r8d, reloc.WS2_32.dll_recv
mov qword [rbp], rax
lea rdx, [rsp + 0x60]
mov rcx, rax
lea rbx, [rax + 0x10]
mov qword [rbp + 0x10], rbx
call sub.VCRUNTIME140.dll_memmove
lea r8, [rbp]
mov qword [rbp + 8], rbx
mov rdx, rsi
call fcn.1400e6f10
mov rdx, rax
call fcn.1400e74d0
mov rcx, qword [0x140244fb8]
lea rdx, [rsi + 0x18]
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x341bad0
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x341c698
mov qword [0x14023f5e0], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x3489f30
mov qword [0x14023f5d8], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x3474b90
mov qword [0x14023f610], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x3484b00
mov qword [0x14023f5e8], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x342e4e0
mov qword [0x14023f5f0], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x348cf88
mov qword [0x14023f5f8], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x3423f10
mov qword [0x14023f600], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x345aab0
mov qword [0x14023f608], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x3484860
mov qword [0x14023f630], rax
call fcn.1400e6b80
mov edx, 2
mov qword [0x14023f648], rax
mov qword [rsp + 0x60], reloc.SHLWAPI.dll_IStream_Read
mov qword [rsp + 0x68], reloc.WS2_32.dll_recv
call fcn.1400ef2a0
mov r8d, reloc.WS2_32.dll_recv
mov qword [rbp], rax
lea rdx, [rsp + 0x60]
mov rcx, rax
lea rbx, [rax + 0x10]
mov qword [rbp + 0x10], rbx
call sub.VCRUNTIME140.dll_memmove
mov rdx, qword [0x14023f600]
lea r8, [rbp]
mov qword [rbp + 8], rbx
call fcn.1400e6f10
mov rbx, rax
lea rdx, [rax + 0x18]
call fcn.1400e72f0
test eax, eax
jle 0x1400dbcf0
add rbx, 0x20
mov esi, eax
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [0x140244fb8]
mov rdx, rbx
call fcn.1400e6b80
mov rdx, rax
call fcn.140063720
add rbx, 8
sub rsi, r13
jne 0x1400dbcd0
mov rcx, qword [0x140237ef8]
call fcn.1400c3420
lea rdx, [rsp + 0x60]
call fcn.140063920
lea r12, [0x140240338]
mov r15, rax
cmp r12, rax
je 0x1400dbd9d
mov r14, qword [0x140240338]
mov rsi, qword [r14 + 8]
cmp byte [rsi + 0x19], dil
jne 0x1400dbd61
nop word [rax + rax]
mov r8, qword [rsi + 0x10]
mov rdx, r12
mov rcx, r12
call fcn.1400ed580
mov rbx, rsi
mov rsi, qword [rsi]
lea rcx, [rbx + 0x20]
call fcn.1400e2c20
mov edx, 0x48
mov rcx, rbx
call fcn.1401a685c
cmp byte [rsi + 0x19], dil
je 0x1400dbd30
mov qword [r14 + 8], r14
mov qword [r14], r14
mov qword [r14 + 0x10], r14
mov rcx, qword [0x140240338]
mov qword [0x140240340], rdi
mov rax, qword [r15]
mov qword [0x140240338], rax
mov rax, qword [r15 + 8]
mov qword [r15], rcx
mov rcx, qword [0x140240340]
mov qword [0x140240340], rax
mov qword [r15 + 8], rcx
lea rcx, [rsp + 0x60]
call fcn.1400dfbc0
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov ecx, 5
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
cmp byte [0x14023f5b8], dil
jne 0x1400dbf51
nop
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x341bad0
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x341c698
mov qword [0x14023f5e0], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x3489f30
mov qword [0x14023f5d8], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x3474b90
mov qword [0x14023f610], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x3484b00
mov qword [0x14023f5e8], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x342e4e0
mov qword [0x14023f5f0], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x348cf88
mov qword [0x14023f5f8], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x3423f10
mov qword [0x14023f600], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x345aab0
mov qword [0x14023f608], rax
call fcn.1400e6b80
mov rdx, qword [0x14023f5c8]
mov rcx, qword [0x140244fb8]
add rdx, 0x3484860
mov qword [0x14023f630], rax
call fcn.1400e6b80
mov ecx, Ordinal_41
mov qword [0x14023f648], rax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
jne 0x1400dbf51
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
sub rax, rbx
cmp rax, 0x1b6b0b00
jge 0x1400dbf51
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x14023f5b8], dil
je 0x1400dbdd0
mov rcx, r13
mov byte [0x14023f704], r13b
call fcn.1401a69b8
lea rcx, [rbp - 0x18]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x1400f88c0]
xor ecx, ecx
mov dword [rsp + 0x20], edi
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x20], rax
test rax, rax
je 0x1400dd0a4
cmp dword [rbp - 0x18], edi
je 0x1400dd0b3
movaps xmm0, xmmword [rbp - 0x20]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400dd0b3
xorps xmm0, xmm0
mov rcx, r13
movdqa xmmword [rbp - 0x20], xmm0
call fcn.1401a69b8
lea rcx, [rbp - 0x28]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x1400f88f0]
xor ecx, ecx
mov dword [rsp + 0x20], edi
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x30], rax
test rax, rax
je 0x1400dd095
cmp dword [rbp - 0x28], edi
je 0x1400dd0b3
movaps xmm0, xmmword [rbp - 0x30]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400dd0b3
xorps xmm0, xmm0
mov rcx, r13
movdqa xmmword [rbp - 0x30], xmm0
call fcn.1401a69b8
lea rcx, [rbp - 0x38]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x1400f8960]
xor ecx, ecx
mov dword [rsp + 0x20], edi
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x40], rax
test rax, rax
je 0x1400dd086
cmp dword [rbp - 0x38], edi
je 0x1400dd0b3
movaps xmm0, xmmword [rbp - 0x40]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400dd0b3
xorps xmm0, xmm0
mov rcx, r13
movdqa xmmword [rbp - 0x40], xmm0
call fcn.1401a69b8
lea rcx, [rbp - 0x48]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x1400f8ab0]
xor ecx, ecx
mov dword [rsp + 0x20], edi
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x1400dd077
cmp dword [rbp - 0x48], edi
je 0x1400dd0b3
movaps xmm0, xmmword [rbp - 0x50]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400dd0b3
xorps xmm0, xmm0
mov rcx, r13
movdqa xmmword [rbp - 0x50], xmm0
call fcn.1401a69b8
lea rcx, [rbp + 0x28]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x1400f8b30]
xor ecx, ecx
mov dword [rsp + 0x20], edi
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x1400dd068
cmp dword [rbp + 0x28], edi
je 0x1400dd0b3
movaps xmm0, xmmword [rbp + 0x20]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400dd0b3
xorps xmm0, xmm0
mov rcx, r13
movdqa xmmword [rbp + 0x20], xmm0
call fcn.1401a69b8
lea rcx, [rbp - 0x58]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x1400f8c20]
xor ecx, ecx
mov dword [rsp + 0x20], edi
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x60], rax
test rax, rax
je 0x1400dd059
cmp dword [rbp - 0x58], edi
je 0x1400dd0b3
movaps xmm0, xmmword [rbp - 0x60]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400dd0b3
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x60], xmm0
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
mov edx, 0x10000
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
cmp byte [0x14023f5b8], dil
jne 0x1400dc72f
movabs rbx, 0x346dc5d63886594b
movabs r14, 0xdd67c8a60dd67c
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
mov rax, rbx
imul rcx
sar rdx, 0xb
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, dword [0x14023fa0c]
cmp rdx, rax
jle 0x1400dc41b
mov edx, 2
mov qword [rsp + 0x60], reloc.SHLWAPI.dll_IStream_Read
mov qword [rsp + 0x68], rdi
call fcn.1400ef2a0
mov r8d, reloc.WS2_32.dll_recv
mov qword [rbp], rax
lea rdx, [rsp + 0x60]
mov rcx, rax
lea rbx, [rax + 0x10]
mov qword [rbp + 0x10], rbx
call sub.VCRUNTIME140.dll_memmove
mov rdx, qword [0x14023f610]
lea r8, [rbp]
mov qword [rbp + 8], rbx
call fcn.1400e6f10
mov rcx, qword [0x140244fb8]
lea rdx, [rax + 0x10]
call fcn.1400e6b80
lea rcx, [0x140237ed8]
mov qword [0x140244f00], rax
call fcn.140081750
mov rcx, qword [0x14023d140]
movabs rax, 0x3759f22983759f23
sub rcx, qword [0x14023d138]
xor r15b, r15b
imul rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
xor sil, sil
mov qword [rbp - 0x70], rdi
mov rbx, rdx
xor r12b, r12b
sar rbx, 6
mov rax, rbx
shr rax, 0x3f
add rbx, rax
je 0x1400dc30d
cmp rbx, r14
ja 0x1400dd0cc
mov rdx, rbx
call fcn.1400ef0d0
mov rdx, qword [0x14023d140]
lea r9, [rbp - 0x80]
imul rcx, rbx, 0x128
mov r8, rax
mov qword [rbp - 0x80], rax
add rcx, rax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rcx
mov rcx, qword [0x14023d138]
call fcn.1400f0750
mov r14, rax
mov qword [rbp - 0x78], rax
jmp 0x1400dc311
mov r14, qword [rbp - 0x78]
mov rbx, qword [rbp - 0x80]
cmp rbx, r14
je 0x1400dc377
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.1400857e0
mov eax, dword [rbp + 0x70]
cmp eax, 0x8d
jne 0x1400dc33c
movzx r15d, r13b
jmp 0x1400dc356
cmp eax, 0x91
jne 0x1400dc349
movzx r12d, r13b
jmp 0x1400dc356
cmp eax, 0x90
movzx esi, sil
cmove esi, r13d
lea rcx, [rbp + 0x30]
call fcn.140069b90
add rbx, 0x128
cmp rbx, r14
jne 0x1400dc320
mov byte [0x14023fbb4], r13b
test r15b, r15b
jne 0x1400dc37e
mov byte [0x14023fbb4], dil
test sil, sil
lea rcx, [rbp - 0x80]
setne byte [0x14023fbb5]
test r12b, r12b
setne byte [0x14023fbb6]
call fcn.1400e2550
mov rdx, qword [0x140239168]
add rdx, 0x8c8
call fcn.1400e72f0
shr eax, 2
test r13b, al
je 0x1400dc3ec
mov rsi, qword [0x140239168]
add rsi, 0x8c8
mov rdx, rsi
call fcn.1400e72f0
mov rdx, rsi
mov ebx, eax
call fcn.1400e72f0
shr eax, 2
lea r8d, [rbx - 4]
test r13b, al
mov rdx, rsi
cmove r8d, ebx
call fcn.1400e7590
mov eax, dword [0x14023f9bc]
movabs rbx, 0x346dc5d63886594b
inc eax
movabs r14, 0xdd67c8a60dd67c
mov dword [0x14023f9bc], eax
cmp eax, 0x3e8
jl 0x1400dc41b
mov dword [0x14023f9bc], edi
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x14023f590]
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sete byte [0x14023f5b9]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x1400dc5c6
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400dc4b8
mov rax, qword [0x14023fbc0]
cmp byte [rax], dil
je 0x1400dc46d
mov ecx, 0x7d0
mov byte [rax], dil
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [0x14023fc28]
cmp byte [rax], dil
je 0x1400dc47c
mov byte [rax], dil
mov rax, qword [0x14023fc40]
cmp byte [rax], dil
je 0x1400dc48b
mov byte [rax], dil
mov rax, qword [0x14023fc58]
cmp byte [rax], dil
je 0x1400dc49a
mov byte [rax], dil
mov rax, qword [0x14023fc70]
cmp byte [rax], dil
je 0x1400dc4a9
mov byte [rax], dil
mov rax, qword [0x14023fca0]
cmp byte [rax], dil
je 0x1400dc4b8
mov byte [rax], dil
cmp byte [0x14023f5b9], dil
je 0x1400dc5b4
mov ecx, dword [0x14023f708]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400dc4e4
cmp byte [0x14023f6e0], dil
sete byte [0x14023f6e0]
mov ecx, reloc.WS2_32.dll_WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400dc502
cmp byte [0x14023f998], dil
sete byte [0x14023f998]
cmp qword [0x14023f6b8], rdi
je 0x1400dc5b4
cmp byte [0x1402391a1], dil
je 0x1400dc5b4
mov ecx, dword [0x14023fb24]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
mov rax, qword [0x14023fa68]
setne cl
mov byte [rax], cl
mov ecx, dword [0x14023fb18]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
mov rax, qword [0x14023fd50]
setne cl
mov byte [rax], cl
mov ecx, dword [0x14023fb4c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
mov rax, qword [0x14023fd58]
setne cl
mov byte [rax], cl
mov ecx, dword [0x14023fb14]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400dc58c
cmp byte [0x14023fa58], dil
sete byte [0x14023fa58]
mov eax, dword [0x14023f9ac]
inc eax
mov dword [0x14023f9ac], eax
cmp eax, 0x3e8
jl 0x1400dc5a7
mov dword [0x14023f9ac], edi
lea rcx, [rbp - 0x80]
mov qword [rbp - 0x80], r13
call fcn.1400e79d0
cmp byte [0x14023f5b8], dil
je 0x1400dc1e5
jmp 0x1400dc72f
mov byte [0x14023f5b8], r13b
cmp dword [rbp - 8], edi
je 0x1400dc608
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 8], eax
je 0x1400dc6f4
movaps xmm0, xmmword [rbp - 0x10]
lea rcx, [rsp + 0x60]
xor edx, edx
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400dc71b
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x10], xmm0
cmp dword [rbp - 0x18], edi
je 0x1400dc643
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x18], eax
je 0x1400dc6f4
movaps xmm0, xmmword [rbp - 0x20]
lea rcx, [rsp + 0x60]
xor edx, edx
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400dc71b
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x20], xmm0
cmp dword [rbp - 0x28], edi
je 0x1400dc67e
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x28], eax
je 0x1400dc6f4
movaps xmm0, xmmword [rbp - 0x30]
lea rcx, [rsp + 0x60]
xor edx, edx
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400dc71b
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
cmp dword [rbp - 0x38], edi
je 0x1400dc6b1
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x38], eax
je 0x1400dc6f4
movaps xmm0, xmmword [rbp - 0x40]
lea rcx, [rsp + 0x60]
xor edx, edx
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400dc71b
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x40], xmm0
cmp dword [rbp - 0x48], edi
je 0x1400dc6e4
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x48], eax
je 0x1400dc6f4
movaps xmm0, xmmword [rbp - 0x50]
lea rcx, [rsp + 0x60]
xor edx, edx
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400dc71b
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
cmp dword [rbp - 0x58], edi
je 0x1400dc72f
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x58], eax
jne 0x1400dc700
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp - 0x60]
lea rcx, [rsp + 0x60]
xor edx, edx
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
je 0x1400dc727
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x60], xmm0
mov rcx, qword [0x14023f6e8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fd98]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fda0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fda8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fdb0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fdb8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fde8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fdf8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe00]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe08]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe10]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe18]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe20]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe28]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe30]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe38]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe40]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe48]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe50]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe58]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe60]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe68]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe70]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe78]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe80]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe88]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe90]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fe98]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fea0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023feb0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023feb8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fec0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fec8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fed0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fed8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fee0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fee8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fef0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fef8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff00]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff08]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff10]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff18]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff20]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff28]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff30]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff38]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff40]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff48]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff50]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff58]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff60]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff68]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff70]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff78]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff80]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff88]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff90]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ff98]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ffa0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ffa8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ffb0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ffb8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ffc0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ffc8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ffd0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ffd8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023ffe0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fff0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x14023fff8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240000]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240008]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240010]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240018]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240020]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240028]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240030]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240038]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240040]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240048]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240050]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240058]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240060]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240068]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240070]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240078]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240080]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240088]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240090]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240098]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402400a0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402400a8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402400b0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402400b8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402400c0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402400c8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402400d0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402400d8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402400e0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402400e8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402400f0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402400f8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240100]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240108]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240110]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240118]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240120]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240128]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240130]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240138]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240140]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240148]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240150]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240158]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240160]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240168]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240170]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240178]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240180]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240188]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240190]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240198]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402401a0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402401a8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402401b0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402401b8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402401c0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402401c8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402401d0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402401d8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402401e0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402401e8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402401f0]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x1402401f8]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240200]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240208]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240210]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240218]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240220]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240228]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240238]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240240]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240248]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240250]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240258]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240260]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240268]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240270]
mov rdx, r13
call fcn.1401a685c
mov rcx, qword [0x140240280]
mov rdx, r13
call fcn.1401a685c
cmp dword [rbp - 0x58], edi
jne 0x1400dd052
cmp dword [rbp + 0x28], edi
jne 0x1400dd052
cmp dword [rbp - 0x48], edi
jne 0x1400dd052
cmp dword [rbp - 0x38], edi
jne 0x1400dd052
cmp dword [rbp - 0x28], edi
jne 0x1400dd052
cmp dword [rbp - 0x18], edi
jne 0x1400dd052
cmp dword [rbp - 8], 0
jne 0x1400dd052
mov r14, qword [rsp + 0x278]
mov eax, edi
mov rsi, qword [rsp + 0x2a0]
mov r12, qword [rsp + 0x2a8]
mov r15, qword [rsp + 0x270]
mov r13, qword [rsp + 0x2b0]
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.1401a64d0
add rsp, 0x280
pop rdi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 6
mov dword [rbp - 0x58], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x28], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp - 0x48], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp - 0x38], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp - 0x28], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp - 0x18], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp - 8], edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call fcn.1400e4c90
int3