Function at 0x140008570
Capabilities:
Get graphical window text
Get keyboard layout

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x14007a100]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov ebx, ecx
xor r12d, r12d
lea eax, [rcx - 1]
cmp eax, 1
jbe 0x140008e00
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rcx, rax
sub rcx, qword [0x14007e868]
movabs rax, 0x624dd2f1a9fbe77
mul rcx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 9
lea rdi, [0x14007e848]
cmp cx, 0xa
jbe 0x140008729
cmp cx, 0x3c
jae 0x14000872d
movzx edx, cx
lea rcx, [rbp - 0x39]
call fcn.1400081a0
nop
mov r8, rax
lea rdx, [0x14006c3a8]
lea rcx, [rbp - 0x59]
call fcn.14000ca30
nop
lea rdx, [0x14006c380]
mov rcx, rax
call fcn.14000b340
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x79], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x69], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea rdx, [rbp - 0x79]
mov rcx, rdi
call fcn.14000b3d0
nop
mov rdx, qword [rbp - 0x61]
cmp rdx, 7
jbe 0x14000868f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x79]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008689
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008e36
call fcn.14002ed30
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 7
jbe 0x1400086cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400086ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008e3c
call fcn.14002ed30
movdqa xmm0, xmmword [0x14006deb0]
movdqu xmmword [rbp - 0x49], xmm0
mov word [rbp - 0x59], r12w
mov rdx, qword [rbp - 0x21]
cmp rdx, 7
jbe 0x14000886c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008867
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008e30
jmp 0x140008867
cmp cx, 0x3c
jbe 0x14000886c
movzx ecx, cx
mov eax, 0x88888889
mul ecx
shr edx, 5
lea rcx, [rbp - 0x39]
call fcn.1400081a0
nop
mov r8, rax
lea rdx, [0x14006c3e0]
lea rcx, [rbp - 0x79]
call fcn.14000ca30
nop
lea rdx, [0x14006c3b8]
mov rcx, rax
call fcn.14000b340
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x59], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x49], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea rdx, [rbp - 0x59]
mov rcx, rdi
call fcn.14000b3d0
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 7
jbe 0x1400087da
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400087d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008e42
call fcn.14002ed30
nop
mov rdx, qword [rbp - 0x61]
cmp rdx, 7
jbe 0x14000881a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x79]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008815
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008e48
call fcn.14002ed30
movdqa xmm0, xmmword [0x14006deb0]
movdqu xmmword [rbp - 0x69], xmm0
mov word [rbp - 0x79], r12w
mov rdx, qword [rbp - 0x21]
cmp rdx, 7
jbe 0x14000886c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008867
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008e4e
call fcn.14002ed30
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rsi, rax
test rax, rax
je 0x140008ba9
mov dword [rbp + 7], r12d
lea rdx, [rbp + 7]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 0x1f], r12
mov qword [rbp + 0x27], r12
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0xf]
call fcn.14000ced0
nop
lea rdx, [rbp + 0xf]
cmp qword [rbp + 0x27], 7
cmova rdx, qword [rbp + 0xf]
mov r8d, dword [rbp + 0x1f]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je 0x140008b56
lea r14, [0x14007ada0]
mov rcx, r14
cmp qword [0x14007adb8], 7
cmova rcx, qword [0x14007ada0]
lea r8, [rbp + 0xf]
cmp qword [rbp + 0x27], 7
cmova r8, qword [rbp + 0xf]
mov rdx, qword [rbp + 0x1f]
cmp rdx, qword [0x14007adb0]
jne 0x140008939
test rdx, rdx
je 0x140008b56
sub r8, rcx
nop
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x140008939
add rcx, 2
sub rdx, 1
jne 0x140008920
jmp 0x140008b56
mov edx, dword [rbp + 7]
lea rcx, [rbp - 0x19]
call fcn.140008430
nop
mov r8, rax
lea rdx, [0x14006c3f8]
lea rcx, [rbp - 0x39]
call fcn.14000ca30
nop
lea rdx, [0x14006c3f0]
mov rcx, rax
call fcn.14000b340
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x69], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x79], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x69], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea rdx, [rbp + 0xf]
cmp qword [rbp + 0x27], 7
cmova rdx, qword [rbp + 0xf]
mov r8, qword [rbp + 0x1f]
lea rcx, [rbp - 0x79]
call fcn.14000c280
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x59], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x49], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea rdx, [rbp - 0x59]
mov rcx, rdi
call fcn.14000b3d0
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 7
jbe 0x140008a1f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008a19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008e54
call fcn.14002ed30
nop
mov rdx, qword [rbp - 0x61]
cmp rdx, 7
jbe 0x140008a5f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x79]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008a5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008e5a
call fcn.14002ed30
movdqa xmm0, xmmword [0x14006deb0]
movdqu xmmword [rbp - 0x69], xmm0
mov word [rbp - 0x79], r12w
mov rdx, qword [rbp - 0x21]
cmp rdx, 7
jbe 0x140008ab9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008aac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008e60
call fcn.14002ed30
movdqa xmm0, xmmword [0x14006deb0]
movdqu xmmword [rbp - 0x29], xmm0
mov word [rbp - 0x39], r12w
mov rdx, qword [rbp - 1]
cmp rdx, 7
jbe 0x140008b03
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008afe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008e66
call fcn.14002ed30
lea r9, [rbp + 0xf]
cmp qword [rbp + 0x27], 7
cmova r9, qword [rbp + 0xf]
mov rsi, qword [rbp + 0x1f]
mov rax, qword [0x14007adb8]
cmp rsi, rax
ja 0x140008b4a
cmp rax, 7
cmova r14, qword [0x14007ada0]
mov qword [0x14007adb0], rsi
lea r8, [rsi + rsi]
mov rdx, r9
mov rcx, r14
call fcn.14005b2e0
mov word [r14 + rsi*2], r12w
jmp 0x140008b56
mov rdx, rsi
mov rcx, r14
call fcn.14000e200
nop
mov rdx, qword [rbp + 0x27]
cmp rdx, 7
jbe 0x140008b96
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008b91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008e2a
call fcn.14002ed30
mov qword [rbp + 0x1f], r12
mov qword [rbp + 0x27], 7
mov word [rbp + 0xf], r12w
jmp 0x140008bad
mov r15, qword [rbp + 7]
movzx ecx, byte [0x14007e830]
test cl, cl
je 0x140008bce
mov edx, ebx
call fcn.1400091b0
mov rcx, rax
call fcn.1400060f0
movzx ecx, byte [0x14007e830]
cmp ebx, 8
jne 0x140008bdf
lea rdx, [0x14006c408]
jmp 0x140008de5
cmp ebx, 0xd
jne 0x140008bf6
mov r8d, 5
lea rdx, [0x14006c418]
jmp 0x140008deb
cmp ebx, 0x20
jne 0x140008c0d
mov r8d, 1
lea rdx, [0x14006c424]
jmp 0x140008deb
cmp ebx, 9
jne 0x140008c24
mov r8d, 5
lea rdx, [0x14006c428]
jmp 0x140008deb
cmp ebx, 0x10
je 0x140008dde
lea eax, [rbx - 0xa0]
cmp eax, 1
jbe 0x140008dde
cmp ebx, 0x11
je 0x140008dd5
lea eax, [rbx - 0xa2]
cmp eax, 1
jbe 0x140008dd5
cmp ebx, 0x1b
jne 0x140008c6b
mov r8d, 5
lea rdx, str._ESC_
jmp 0x140008deb
cmp ebx, 0x12
je 0x140008dcc
lea eax, [rbx - 0xa4]
cmp eax, 1
jbe 0x140008dcc
cmp ebx, 0x23
jne 0x140008c9a
mov r8d, 5
lea rdx, str._END_
jmp 0x140008deb
cmp ebx, 0x24
jne 0x140008cb1
mov r8d, 6
lea rdx, str._HOME_
jmp 0x140008deb
cmp ebx, 0x25
jne 0x140008cc2
lea rdx, [0x14006c498]
jmp 0x140008de5
cmp ebx, 0x27
jne 0x140008cd3
lea rdx, [0x14006c4a8]
jmp 0x140008de5
cmp ebx, 0x26
jne 0x140008ce4
lea rdx, [0x14006c4b8]
jmp 0x140008de5
cmp ebx, 0x28
jne 0x140008cf5
lea rdx, [0x14006c4c8]
jmp 0x140008de5
cmp ebx, 0xbe
jne 0x140008d69
mov eax, 0x419
cmp r15w, ax
jne 0x140008d79
test cl, cl
je 0x140008d26
mov rdx, r15
mov ecx, ebx
call fcn.140008350
movzx edx, ax
call fcn.14000c680
mov rcx, rax
call fcn.14000c9a0
mov rdx, r15
mov ecx, ebx
call fcn.140008350
mov rdx, qword [0x14007e858]
mov r8, qword [0x14007e860]
cmp rdx, r8
jae 0x140008da7
lea rcx, [rdx + 1]
mov qword [0x14007e858], rcx
cmp r8, 7
cmova rdi, qword [0x14007e848]
mov word [rdi + rdx*2], ax
mov word [rdi + rdx*2 + 2], r12w
jmp 0x140008df3
cmp ebx, 0x6e
jne 0x140008d88
mov eax, 0x419
cmp r15w, ax
je 0x140008d08
mov r8d, 1
lea rdx, [0x14006c4d4]
jmp 0x140008deb
cmp ebx, 0xbd
je 0x140008dbd
cmp ebx, 0x6d
je 0x140008dbd
cmp ebx, 0x14
jne 0x140008d08
lea rdx, [0x14006c4e0]
jmp 0x140008de5
movzx r9d, ax
xor r8d, r8d
mov edx, 1
mov rcx, rdi
call fcn.14000e070
jmp 0x140008df3
mov r8d, 1
lea rdx, [0x14006c4d8]
jmp 0x140008deb
lea rdx, [0x14006c468]
jmp 0x140008de5
lea rdx, [0x14006c448]
jmp 0x140008de5
lea rdx, [0x14006c438]
mov r8d, 4
mov rcx, rdi
call fcn.14000c280
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x14007e868], rax
xor eax, eax
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.14002ed10
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140036848
int3
call fcn.140036848
nop
call fcn.140036848
nop
call fcn.140036848
nop
call fcn.140036848
nop
call fcn.140036848
nop
call fcn.140036848
nop
call fcn.140036848
nop
call fcn.140036848
nop
call fcn.140036848
nop
call fcn.140036848
int3