Function at 0x140030588
Capabilities:
Log keystrokes via polling
Reference sql statements

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
mov rax, 0x1c
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x140030597
sub rsp, 0x28
call fcn.1400bc5a0
push qword [0x1404bc1f0]
pop rcx
call fcn.14004dcb4
and rax, rax
je 0x1400305c7
jmp 0x140032396
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 0
push reloc.WS2_32.dll_recv
pop rcx
call sub.USER32.dll_GetKeyState
mov r15, rax
cmp r15, 1
jle 0x140030623
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x60], 0
movabs rdx, 0x140271064
lea rcx, [rsp + 0x68]
call fcn.1400bc120
push 1
pop rcx
call fcn.1400165a3
mov r15, qword [rsp + 0x120]
cmp r15, 0x18669
jne 0x140030690
mov rcx, qword [0x1404bbd68]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
lea rcx, [rsp + 0x70]
pop rdx
call fcn.1400bc2d0
jmp 0x1400309a2
mov r15, qword [0x1404bc2b8]
and r15, r15
jne 0x1400306de
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
pop rcx
sub rsp, 0x20
call fcn.1400ac6a4
add rsp, 0x28
lea rcx, [rsp + 0x70]
pop rdx
call fcn.1400bc2d0
jmp 0x1400309a2
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 1
push 0
movabs rax, str.Text__.txt_.txt_.keyAll_files__._.
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
pop rcx
sub rsp, 0x20
call fcn.14006eff8
add rsp, 0x20
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400aa888
add rsp, 0x28
movabs rcx, 0x14027b648
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
call fcn.1400bc470
push qword [0x1404bbe38]
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140050ebc
add rsp, 0x38
lea rcx, [rsp + 0x78]
pop rdx
call fcn.1400bc2d0
mov rcx, qword [rsp + 0x70]
xor rdx, rdx
call fcn.1400bc3b0
or rax, rax
jne 0x1400309a2
push qword [rsp + 0x70]
push 8
pop rcx
pop rdx
call fcn.140097ed0
and rax, rax
je 0x14003088d
push 8
pop rcx
call fcn.140098130
mov r15, rax
and r15, r15
jne 0x140030882
mov rcx, qword [rsp + 0x68]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0x10000
push 8
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140098200
add rsp, 0x20
pop rax
lea rcx, [rsp + 0x70]
pop rdx
call fcn.1400bc2d0
jmp 0x140030804
push 8
pop rcx
call fcn.140097920
mov rcx, qword [rsp + 0x70]
xor rdx, rdx
call fcn.1400bc3b0
or rax, rax
jne 0x1400309a2
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
pop rcx
sub rsp, 0x20
call fcn.140050db0
add rsp, 0x28
lea rcx, [rsp + 0x78]
pop rdx
call fcn.1400bc2d0
mov rcx, qword [rsp + 0x70]
xor rdx, rdx
call fcn.1400bc3b0
or rax, rax
jne 0x140030998
push qword [rsp + 0x70]
push 8
pop rcx
pop rdx
call fcn.140097ed0
and rax, rax
je 0x140030998
push 8
pop rcx
call fcn.140098130
mov r15, rax
and r15, r15
jne 0x14003098d
mov rcx, qword [rsp + 0x68]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0x10000
push 8
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140098200
add rsp, 0x20
pop rax
lea rcx, [rsp + 0x70]
pop rdx
call fcn.1400bc2d0
jmp 0x14003090f
push 8
pop rcx
call fcn.140097920
call fcn.14002bcda
jmp 0x14003088d
movabs rax, reloc.OLEAUT32.dll_SafeArrayGetLBound
push rax
push qword [rsp + 0x70]
pop rcx
pop rdx
call fcn.1400b8e10
mov r15, rax
and r15, r15
jle 0x140030a1f
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
movabs rax, reloc.msi.dll_MsiGetActiveDatabase
push rax
movabs rax, reloc.OLEAUT32.dll_SafeArrayGetLBound
push rax
push qword [rsp + 0x90]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400b9290
add rsp, 0x28
lea rcx, [rsp + 0x70]
pop rdx
call fcn.1400bc2d0
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [rsp + 0x88]
movabs r8, 0x140280488
mov rdx, 8
mov rcx, 8
sub rsp, 0x20
call fcn.1400a8b9c
add rsp, 0x28
add rsp, 8
movabs rax, str._2_46_9b_df_hjkmnp_rtvw_yB_DF_HJKMNP_RTVW_Y_5__2_46_9b_df_hjkmnp_rtvw_yB_DF_HJKMNP_RTVW_Y_5__2_46_9b_df_hjkmnp_rtvw_yB_DF_HJKMNP_RTVW_Y_5__2_46_9b_df_hjkmnp_rtvw_yB_DF_HJKMNP_RTVW_Y_5__2_46_9b_df_hjkmnp_rtvw_yB_DF_HJKMNP_RTVW_Y_5
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
pop rcx
pop rdx
call fcn.1400515a0
and rax, rax
je 0x140030c24
push qword [rsp + 0x68]
push reloc.OLEAUT32.dll_SafeArrayPutElement
pop rcx
pop rdx
call fcn.1400517e0
and rax, rax
je 0x140030c24
push reloc.OLEAUT32.dll_SafeArrayPutElement
pop rcx
call fcn.1400518f0
and rax, rax
je 0x140030c24
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051b40
add rsp, 0x20
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400b8d80
add rsp, 0x28
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140023d0f
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004b97c
add rsp, 0x28
pop rax
mov r15, rax
and r15, r15
jne 0x140030c1f
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051b40
add rsp, 0x20
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400b8d80
add rsp, 0x28
mov rcx, qword [rsp]
sub rsp, 0x20
call fcn.14004b97c
add rsp, 0x20
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rdx
mov rcx, qword [rsp + 0x78]
call fcn.1400a8e1c
mov rbp, rax
movabs rdx, 0x140271064
lea rcx, [rbp]
call fcn.1400bc120
jmp 0x140030a95
movabs rdx, 0x140271064
lea rcx, [rsp + 0x68]
call fcn.1400bc120
push qword [rsp + 0x78]
pop rcx
call fcn.1400a8e50
mov r15, rax
and r15, r15
jle 0x140032378
mov r9, 8
movabs r8, 0x140280488
lea rdx, [rsp + 0x80]
mov rcx, 8
call fcn.1400b380c
mov r9, 8
movabs r8, 0x140280488
lea rdx, [rsp + 0x90]
mov rcx, 8
call fcn.1400b380c
mov r9, 8
movabs r8, 0x140280488
lea rdx, [rsp + 0xa0]
mov rcx, 8
call fcn.1400b380c
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [rsp + 0xc0]
movabs r8, 0x140280488
mov rdx, 8
mov rcx, 8
sub rsp, 0x20
call fcn.1400a8b9c
add rsp, 0x28
add rsp, 8
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [rsp + 0xc8]
movabs r8, 0x140280488
mov rdx, 8
mov rcx, 8
sub rsp, 0x20
call fcn.1400a8b9c
add rsp, 0x28
add rsp, 8
movabs rax, str.SELECT_key_FROM_keys_WHERE_NOT_key_AND_Blocked_LIKE__Blocked_
push rax
push qword [0x1404bc258]
pop rcx
pop rdx
call fcn.1400ac408
mov r15, rax
and r15, r15
je 0x140030e41
push qword [0x1404bc258]
pop rcx
call fcn.1400ac484
and rax, rax
je 0x140030e35
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0
push qword [0x1404bc258]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400ac4b8
add rsp, 0x20
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400b8d80
add rsp, 0x28
mov rcx, qword [rsp]
sub rsp, 0x20
call fcn.14004b97c
add rsp, 0x20
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rdx
mov rcx, qword [rsp + 0xb8]
call fcn.1400a8e1c
mov rbp, rax
movabs rdx, str.null
lea rcx, [rbp]
call fcn.1400bc120
jmp 0x140030d5b
push qword [0x1404bc258]
pop rcx
call fcn.1400ac500
push qword [rsp + 0xb8]
pop rcx
call fcn.1400a8e50
mov qword [rsp + 0xc0], rax
call fcn.14002bcda
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [rsp + 0xd8]
movabs r8, 0x140280488
mov rdx, 8
mov rcx, 8
sub rsp, 0x20
call fcn.1400a8b9c
add rsp, 0x28
add rsp, 8
movabs rax, str.SELECT_key_FROM_keys_WHERE_NOT_key_AND_Blocked_AND_Description
push rax
push qword [0x1404bc258]
pop rcx
pop rdx
call fcn.1400ac408
mov r15, rax
and r15, r15
je 0x140030fa2
push qword [0x1404bc258]
pop rcx
call fcn.1400ac484
and rax, rax
je 0x140030f96
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0
push qword [0x1404bc258]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400ac4b8
add rsp, 0x20
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400b8d80
add rsp, 0x28
mov rcx, qword [rsp]
sub rsp, 0x20
call fcn.14004b97c
add rsp, 0x20
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rdx
mov rcx, qword [rsp + 0xc8]
call fcn.1400a8e1c
mov rbp, rax
movabs rdx, str.null
lea rcx, [rbp]
call fcn.1400bc120
jmp 0x140030ebc
push qword [0x1404bc258]
pop rcx
call fcn.1400ac500
push qword [rsp + 0xc8]
pop rcx
call fcn.1400a8e50
mov qword [rsp + 0xc0], rax
call fcn.14002bcda
mov rcx, 0x200
sub rsp, 8
push rcx
lea r9, [rsp + 0xe0]
movabs r8, 0x140280488
mov rdx, 8
mov rcx, 8
sub rsp, 0x20
call fcn.1400a8b9c
add rsp, 0x28
add rsp, 8
movabs rax, str.SELECT_key_FROM_keys_WHERE_NOT_key_AND_NOT_Description_AND_Blocked
push rax
push qword [0x1404bc258]
pop rcx
pop rdx
call fcn.1400ac408
mov r15, rax
and r15, r15
je 0x140031103
push qword [0x1404bc258]
pop rcx
call fcn.1400ac484
and rax, rax
je 0x1400310f7
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0
push qword [0x1404bc258]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400ac4b8
add rsp, 0x20
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400b8d80
add rsp, 0x28
mov rcx, qword [rsp]
sub rsp, 0x20
call fcn.14004b97c
add rsp, 0x20
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rdx
mov rcx, qword [rsp + 0xd0]
call fcn.1400a8e1c
mov rbp, rax
movabs rdx, str.null
lea rcx, [rbp]
call fcn.1400bc120
jmp 0x14003101d
push qword [0x1404bc258]
pop rcx
call fcn.1400ac500
push qword [rsp + 0xd0]
pop rcx
call fcn.1400a8e50
mov qword [rsp + 0xc0], rax
call fcn.14002bcda
mov rcx, qword [rsp + 0x78]
call fcn.1400a8e58
mov rcx, qword [rsp + 0x78]
call fcn.1400a8e94
or rax, rax
je 0x140031c8d
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x90]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400a8f34
add rsp, 0x28
lea rcx, [rsp + 0xe0]
pop rdx
call fcn.1400bc2d0
mov r15, qword [rsp + 0x38]
inc r15
mov qword [rsp + 0x38], r15
push 0x52
pop rcx
call fcn.14009d020
mov r15, rax
cmp r15, 1
jne 0x1400314df
mov r15, qword [rsp + 0x28]
and r15, r15
jle 0x140031248
push qword [rsp + 0xd8]
pop rdx
mov rcx, qword [0x1404bca40]
call fcn.1400a8e1c
mov rbp, rax
movabs rdx, 0x140271064
lea rcx, [rbp]
call fcn.1400bc120
call fcn.14003332a
mov r15, qword [rsp + 0x30]
inc r15
mov qword [rsp + 0x30], r15
push qword [rsp + 0xd8]
pop rdx
mov rcx, qword [rsp + 0xb0]
call fcn.1400a8e1c
mov rbp, rax
movabs rdx, str.null
lea rcx, [rbp]
call fcn.1400bc120
push SafeArrayPutElement
pop rcx
call fcn.14009ce1c
mov r15, qword [0x1404bc1a0]
inc r15
mov qword [0x1404bc1a0], r15
mov qword [0x1404bbf18], 1
jmp 0x1400314da
mov qword [rsp + 0xe0], 0
push qword [rsp + 0xd8]
push qword [0x1404bca40]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x140031286
mov qword [rsp + 0xe0], 1
mov r15, qword [rsp + 0x40]
inc r15
mov qword [rsp + 0x40], r15
call fcn.14002bcda
push qword [rsp + 0xd8]
push qword [rsp + 0xc0]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x140031302
mov qword [rsp + 0xe0], 1
mov r15, qword [rsp + 0x58]
inc r15
mov qword [rsp + 0x58], r15
push qword [rsp + 0xa0]
pop rcx
call fcn.1400b38ec
mov rcx, qword [rsp + 0xd8]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
mov rbp, qword [rsp + 0xb0]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.1400bc2d0
call fcn.14002bcda
push qword [rsp + 0xd8]
push qword [rsp + 0xd0]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x14003137e
mov qword [rsp + 0xe0], 1
mov r15, qword [rsp + 0x50]
inc r15
mov qword [rsp + 0x50], r15
push qword [rsp + 0x90]
pop rcx
call fcn.1400b38ec
mov rcx, qword [rsp + 0xd8]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
mov rbp, qword [rsp + 0xa0]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.1400bc2d0
call fcn.14002bcda
push qword [rsp + 0xd8]
push qword [rsp + 0xd8]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x1400313fa
mov qword [rsp + 0xe0], 1
mov r15, qword [rsp + 0x48]
inc r15
mov qword [rsp + 0x48], r15
push qword [rsp + 0x80]
pop rcx
call fcn.1400b38ec
mov rcx, qword [rsp + 0xd8]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
mov rbp, qword [rsp + 0x90]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.1400bc2d0
call fcn.14002bcda
push qword [rsp + 0xd8]
push qword [rsp + 0xb8]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x140031425
mov qword [rsp + 0xe0], 1
call fcn.14002bcda
mov r15, qword [rsp + 0xe0]
and r15, r15
jne 0x1400314da
mov r15, qword [rsp + 0xe0]
and r15, r15
jne 0x1400314da
push qword [rsp + 0xd8]
pop rdx
mov rcx, qword [0x1404bca40]
call fcn.1400a8e1c
mov rbp, rax
movabs rdx, 0x140271064
lea rcx, [rbp]
call fcn.1400bc120
call fcn.14003332a
mov r15, qword [rsp + 0x30]
inc r15
mov qword [rsp + 0x30], r15
push qword [rsp + 0xd8]
pop rdx
mov rcx, qword [rsp + 0xb0]
call fcn.1400a8e1c
mov rbp, rax
movabs rdx, str.null
lea rcx, [rbp]
call fcn.1400bc120
push SafeArrayPutElement
pop rcx
call fcn.14009ce1c
mov r15, qword [0x1404bc1a0]
inc r15
mov qword [0x1404bc1a0], r15
mov qword [0x1404bbf18], 1
jmp 0x140031c83
push 0x54
pop rcx
call fcn.14009d020
mov r15, rax
cmp r15, 1
jne 0x140031946
mov qword [rsp + 0xe8], 0
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], 0
push qword [rsp + 0xd8]
push qword [rsp + 0xc0]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x14003158b
mov r15, qword [rsp + 0x58]
inc r15
mov qword [rsp + 0x58], r15
push qword [rsp + 0xa0]
pop rcx
call fcn.1400b38ec
mov rcx, qword [rsp + 0xd8]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
mov rbp, qword [rsp + 0xb0]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.1400bc2d0
jmp 0x140031941
mov qword [rsp + 0xe8], 0
push qword [rsp + 0xd8]
push qword [rsp + 0xd8]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x1400315bd
mov qword [rsp + 0xe8], 1
call fcn.14002bcda
push qword [rsp + 0xd8]
push qword [rsp + 0xc0]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x1400315e8
mov qword [rsp + 0xe8], 1
call fcn.14002bcda
push qword [rsp + 0xd8]
push qword [rsp + 0xd0]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x140031613
mov qword [rsp + 0xe8], 1
call fcn.14002bcda
push qword [rsp + 0xd8]
push qword [rsp + 0xb8]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x14003163e
mov qword [rsp + 0xe8], 1
call fcn.14002bcda
mov r15, qword [rsp + 0xe8]
cmp r15, 1
jne 0x14003170f
push qword [rsp + 0xd8]
mov rax, qword [0x1404bc258]
mov rax, rax
push rax
pop rcx
pop rdx
call fcn.14002681b
and rax, rax
je 0x14003170a
mov r15, qword [rsp + 0x60]
inc r15
mov qword [rsp + 0x60], r15
push qword [rsp + 0x60]
pop rcx
call fcn.1400166d0
mov r15, qword [rsp + 0x58]
inc r15
mov qword [rsp + 0x58], r15
push qword [rsp + 0xa0]
pop rcx
call fcn.1400b38ec
mov rcx, qword [rsp + 0xd8]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
mov rbp, qword [rsp + 0xb0]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.1400bc2d0
push qword [rsp + 0xd8]
pop rdx
mov rcx, qword [rsp + 0xb8]
call fcn.1400a8e1c
mov rbp, rax
movabs rdx, str.null
lea rcx, [rbp]
call fcn.1400bc120
jmp 0x14003193c
push 1
push 0x52
pop rcx
pop rdx
call fcn.1400a460c
push 1
push 0x54
pop rcx
pop rdx
call fcn.1400a460c
push 1
push 0x56
pop rcx
pop rdx
call fcn.1400a460c
mov qword [0x1404bc328], 0
push qword [0x1404bca40]
pop rcx
call fcn.1400a8cc0
mov qword [0x1404bc1a0], 0
push qword [0x1404bc1a0]
pop rcx
call fcn.1400166d0
movabs rax, 0x140271064
push rax
push 0x49
pop rcx
pop rdx
call fcn.14009cc78
push qword [rsp + 0xd8]
pop rdx
mov rcx, qword [0x1404bca40]
call fcn.1400a8e1c
mov rbp, rax
movabs rdx, 0x140271064
lea rcx, [rbp]
call fcn.1400bc120
push recv
pop rcx
call fcn.1400b2620
mov rax, rax
push rax
push SafeArrayPutElement
pop rcx
pop rdx
call fcn.14009cae8
push 1
lea rax, [0x140038a6b]
mov rax, rax
push rax
pop rcx
pop rdx
call fcn.14004de00
mov qword [0x1404bc1f0], rax
lea rbp, [0x1404bc530]
mov qword [rbp + 0x10], 8
call fcn.14002bcda
lea rbp, [0x1404bc530]
mov r15, qword [rbp + 0x10]
cmp r15, 6
jne 0x1400317f9
push qword [rsp + 0xd8]
mov rax, qword [0x1404bc258]
mov rax, rax
push rax
pop rcx
pop rdx
call fcn.14002681b
and rax, rax
je 0x140031895
mov r15, qword [rsp + 0x60]
inc r15
mov qword [rsp + 0x60], r15
mov r15, qword [rsp + 0x58]
inc r15
mov qword [rsp + 0x58], r15
push qword [rsp + 0xa0]
pop rcx
call fcn.1400b38ec
mov rcx, qword [rsp + 0xd8]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
mov rbp, qword [rsp + 0xb0]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.1400bc2d0
push qword [rsp + 0x60]
pop rcx
call fcn.1400166d0
mov qword [0x1404bc328], 1
push 0
pop rcx
call fcn.14002b398
mov r15, qword [0x1404bc1a0]
and r15, r15
jle 0x1400318c3
push qword [0x1404bc1a0]
pop rcx
call fcn.1400166d0
push qword [rsp + 0xd8]
pop rdx
mov rcx, qword [rsp + 0xb8]
call fcn.1400a8e1c
mov rbp, rax
movabs rdx, str.null
lea rcx, [rbp]
call fcn.1400bc120
push reloc.WS2_32.dll_inet_addr
pop rcx
call fcn.1400b2620
mov rax, rax
push rax
push SafeArrayPutElement
pop rcx
pop rdx
call fcn.14009cae8
push 0
push 0x52
pop rcx
pop rdx
call fcn.1400a460c
push 0
push 0x54
pop rcx
pop rdx
call fcn.1400a460c
push 0
push 0x56
pop rcx
pop rdx
call fcn.1400a460c
call fcn.14002bcda
jmp 0x140031c83
push 0x56
pop rcx
call fcn.14009d020
mov r15, rax
cmp r15, 1
jne 0x140031b77
push qword [rsp + 0xd8]
push qword [rsp + 0xd0]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x1400319ce
mov r15, qword [rsp + 0x50]
inc r15
mov qword [rsp + 0x50], r15
push qword [rsp + 0x90]
pop rcx
call fcn.1400b38ec
mov rcx, qword [rsp + 0xd8]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
mov rbp, qword [rsp + 0xa0]
lea rcx, [rbp + 0x10]
pop rdx
call fcn.1400bc2d0
jmp 0x140031b72
push qword [rsp + 0xd8]
push qword [0x1404bca40]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x1400319fb
push qword [rsp + 0xd8]
push qword [0x1404bca40]
pop rcx
pop rdx
call fcn.1400a8f80
mov qword [0x1404bbf18], 0
push qword [rsp + 0xd8]
push qword [rsp + 0xd0]
pop rcx
pop rdx
call fcn.1400a8d64
and rax, rax
je 0x140031a2b
mov qword [0x1404bbf18], 1
call fcn.14002bcda
mov r15, qword [0x1404bbf18]
and r15, r15
jne 0x140031b72
mov r15, qword [0x1404bbf18]
and r15, r15
jne 0x140031b6d
sub rsp, 8
push 0
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
movabs rax, 0x140271064
push rax
push qword [rsp + 0x158]
movabs rax, 0x140271064
push rax
movabs rax, str.keys
push rax
mov rax, qword [0x1404bc258]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400168bb
add rsp, 0xa0
push qword [rsp + 0xd8]
pop rdx
mov rcx, qword [rsp + 0xc8]
call fcn.1400a8e1c
mov rbp, rax
movabs rdx, str.null
lea rcx, [rbp]
call fcn.1400bc120
push qword [0x1404bc258]
pop rcx
call fcn.14001beb3
call fcn.14003332a
call fcn.14002bcda
jmp 0x140031c83
push 0x66
pop rcx
call fcn.14009d020
mov r15, rax
cmp r15, 1
jne 0x140031c83
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
movabs rcx, str.UPDATE_keys_SET_Comment
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0x58
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14009cd54
add rsp, 0x20
pop rax
movabs rcx, 0x1402779b0
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
mov rcx, qword [rsp + 0xf0]
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
movabs rcx, 0x140271830
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
call fcn.1400bc470
push qword [0x1404bc258]
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400ac2d4
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004b97c
add rsp, 0x28
pop rax
mov r15, rax
and r15, r15
jne 0x140031c83
call fcn.14002bcda
jmp 0x140031127
push qword [0x1404bc258]
pop rcx
call fcn.14001beb3
call fcn.14003332a
push qword [0x1404bca40]
pop rcx
call fcn.1400a8e50
mov r15, rax
cmp r15, 1
jne 0x140031cdf
movabs rax, 0x140271064
push rax
push 0x48
pop rcx
pop rdx
call fcn.14009cc78
push qword [rsp + 0xd8]
push 0x48
pop rcx
pop rdx
call fcn.14009cc78
jmp 0x140031ceb
push qword [0x1404bc1a0]
pop rcx
call fcn.1400166d0
call fcn.1400a67b4
and rax, rax
je 0x140031cf7
jmp 0x140031ceb
push qword [rsp + 0x78]
pop rcx
call fcn.1400a90d8
push qword [rsp + 0xb8]
pop rcx
call fcn.1400a90d8
push qword [rsp + 0xc8]
pop rcx
call fcn.1400a90d8
push qword [rsp + 0xd0]
pop rcx
call fcn.1400a90d8
push qword [rsp + 0xb0]
pop rcx
call fcn.1400a90d8
push 0x52
pop rcx
call fcn.14009d020
mov r15, rax
cmp r15, 1
jne 0x140031d5f
mov r15, qword [0x1404bc328]
cmp r15, 1
jne 0x140031d5f
mov rax, 1
jmp 0x140031d62
xor rax, rax
and rax, rax
je 0x140031d72
push 1
pop rcx
call fcn.14002b398
movabs rax, 0x140276a68
push rax
pop rcx
call fcn.1400349f8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [0x1404bc0e8]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x60]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400b9000
add rsp, 0x20
pop rax
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.1400349f8
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004b97c
add rsp, 0x28
pop rax
push qword [0x1404bc028]
pop rcx
call fcn.1400349f8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [0x1404bbfa0]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x70]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400b9000
add rsp, 0x20
pop rax
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.1400349f8
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004b97c
add rsp, 0x28
pop rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [0x1404bbe08]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x78]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400b9000
add rsp, 0x20
pop rax
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.1400349f8
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004b97c
add rsp, 0x28
pop rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [0x1404bc270]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x80]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400b9000
add rsp, 0x20
pop rax
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.1400349f8
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004b97c
add rsp, 0x28
pop rax
movabs rax, str.____________________________
push rax
pop rcx
call fcn.1400349f8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [0x1404bbe98]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x58]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400b9000
add rsp, 0x20
pop rax
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.1400349f8
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004b97c
add rsp, 0x28
pop rax
movabs rax, 0x140271064
push rax
pop rcx
call fcn.1400349f8
push qword [rsp + 0x80]
pop rcx
call fcn.1400b39c0
mov r15, rax
and r15, r15
jle 0x140032188
movabs rax, reloc.msi.dll_MsiGetActiveDatabase
push rax
pop rcx
call fcn.1400144f0
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [0x1404bbfa0]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
movabs rcx, 0x140271e48
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.1400144f0
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004b97c
add rsp, 0x28
pop rax
mov rcx, qword [rsp + 0x80]
call fcn.1400b39c8
mov rcx, qword [rsp + 0x80]
call fcn.1400b39dc
or rax, rax
je 0x140032188
mov rbp, qword [rsp + 0x88]
push qword [rbp + 0x10]
pop rcx
call fcn.1400144f0
call fcn.14002bcda
jmp 0x14003215e
push qword [rsp + 0x90]
pop rcx
call fcn.1400b39c0
mov r15, rax
and r15, r15
jle 0x140032264
movabs rax, reloc.msi.dll_MsiGetActiveDatabase
push rax
pop rcx
call fcn.1400144f0
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [0x1404bbe08]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
movabs rcx, 0x140271e48
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.1400144f0
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004b97c
add rsp, 0x28
pop rax
mov rcx, qword [rsp + 0x90]
call fcn.1400b39c8
mov rcx, qword [rsp + 0x90]
call fcn.1400b39dc
or rax, rax
je 0x140032264
mov rbp, qword [rsp + 0x98]
push qword [rbp + 0x10]
pop rcx
call fcn.1400144f0
call fcn.14002bcda
jmp 0x14003223a
push qword [rsp + 0xa0]
pop rcx
call fcn.1400b39c0
mov r15, rax
and r15, r15
jle 0x140032340
movabs rax, reloc.msi.dll_MsiGetActiveDatabase
push rax
pop rcx
call fcn.1400144f0
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [0x1404bc270]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
movabs rcx, 0x140271e48
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rax
call fcn.1400bc440
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.1400144f0
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004b97c
add rsp, 0x28
pop rax
mov rcx, qword [rsp + 0xa0]
call fcn.1400b39c8
mov rcx, qword [rsp + 0xa0]
call fcn.1400b39dc
or rax, rax
je 0x140032340
mov rbp, qword [rsp + 0xa8]
push qword [rbp + 0x10]
pop rcx
call fcn.1400144f0
call fcn.14002bcda
jmp 0x140032316
movabs rax, reloc.msi.dll_MsiGetActiveDatabase
push rax
pop rcx
call fcn.1400144f0
push qword [rsp + 0x80]
pop rcx
call fcn.1400b3a18
push qword [rsp + 0x90]
pop rcx
call fcn.1400b3a18
push qword [rsp + 0xa0]
pop rcx
call fcn.1400b3a18
push SafeArrayPutElement
pop rcx
call fcn.14009ce1c
push 0
pop rcx
call fcn.1400165a3
call fcn.14002bcda
xor rax, rax
push rax
mov rcx, qword [rsp + 0x70]
sub rsp, 0x28
call fcn.1400bc6b0
add rsp, 0x28
mov rcx, qword [rsp + 0x78]
sub rsp, 0x28
call fcn.1400bc6b0
add rsp, 0x28
mov rcx, qword [rsp + 0xe0]
sub rsp, 0x28
call fcn.1400bc6b0
add rsp, 0x28
push qword [rsp + 0x88]
pop rcx
sub rsp, 0x28
call fcn.1400b3a18
add rsp, 0x28
push qword [rsp + 0x98]
pop rcx
sub rsp, 0x28
call fcn.1400b3a18
add rsp, 0x28
push qword [rsp + 0xa8]
pop rcx
sub rsp, 0x28
call fcn.1400b3a18
add rsp, 0x28
push qword [rsp + 0x80]
pop rcx
sub rsp, 0x28
call fcn.1400a90d8
add rsp, 0x28
push qword [rsp + 0xb8]
pop rcx
sub rsp, 0x28
call fcn.1400a90d8
add rsp, 0x28
push qword [rsp + 0xc0]
pop rcx
sub rsp, 0x28
call fcn.1400a90d8
add rsp, 0x28
push qword [rsp + 0xd0]
pop rcx
sub rsp, 0x28
call fcn.1400a90d8
add rsp, 0x28
push qword [rsp + 0xd8]
pop rcx
sub rsp, 0x28
call fcn.1400a90d8
add rsp, 0x28
pop rax
add rsp, 0x108
pop r15
pop rbp
ret