Function at 0x140048f20
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x288]
sub rsp, 0x360
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140076140]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
xor r15d, r15d
mov esi, r15d
mov eax, r15d
lea edi, [r15 + 0x19]
mov rcx, qword [0x1400789b0]
nop word [rax + rax]
lea rbx, [rax + 0x1000]
add rax, 0x250
add rcx, rax
call fcn.14004e060
mov rcx, qword [0x1400789b0]
cmp eax, 0x260e020b
mov rax, rbx
jne 0x14004746a
lea rsi, [rbx + rcx]
sub rdi, 1
jne 0x140047440
lea rcx, [rsi + 0x1178f4b8]
call fcn.14004dd80
mov qword [0x140078b20], rax
test rax, rax
je 0x140048885
lea rcx, [rax + 0x1d8]
call fcn.14004dd80
mov qword [0x140078b10], rax
test rax, rax
je 0x140048885
lea rcx, [rax + 0x38]
call fcn.14004dd80
mov rcx, rax
call fcn.14004dd80
mov qword [0x140078af0], rax
test rax, rax
je 0x140048885
lea rcx, [rax + 0x30]
call fcn.14004dd80
mov qword [0x140078b18], rax
test rax, rax
je 0x140048885
lea rcx, [rax + 0x338]
call fcn.14004dd80
mov qword [0x140078af8], rax
test rax, rax
je 0x140048885
lea rcx, [rax + 0x198]
call fcn.14004dd80
mov qword [0x140078ae0], rax
test rax, rax
je 0x140048885
mov rcx, qword [0x140078af8]
add rcx, 0x2b0
call fcn.14004dd80
mov qword [0x140078ae8], rax
test rax, rax
je 0x140048885
mov rcx, qword [0x140078af8]
add rcx, 0xa68
call fcn.14004dd80
mov qword [0x140078b08], rax
test rax, rax
je 0x140048885
mov rcx, qword [0x140078ae0]
add rcx, 0x120
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm6, xmm6
movsd qword [rsp + 0x50], xmm6
lea r8d, [rdi + 0x18]
lea rdx, [rsp + 0x40]
call fcn.140043c30
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [0x140076520], xmm0
movsd xmm0, qword [rsp + 0x50]
movsd qword [0x140076530], xmm0
mov dword [0x140078b00], 0x7f7fffff
mov qword [0x140078ad8], r15
mov rcx, qword [0x140078b20]
add rcx, 0x160
call fcn.14004dd80
mov rbx, rax
test rax, rax
je 0x140048885
lea rcx, [rax + 0x2a8]
call fcn.14004dd80
mov r14, rax
mov qword [rbp + 0x10], rax
lea rcx, [rbx + 0x2b0]
call fcn.14004e060
movsxd rsi, eax
mov qword [rbp - 0x78], rsi
mov edi, r15d
mov dword [rsp + 0x60], r15d
test eax, eax
je 0x140048885
mov rcx, r15
movss xmm13, dword [0x14006a774]
movss xmm15, dword [0x14006a744]
movss xmm9, dword [0x14006a87c]
nop dword [rax + rax]
lea rcx, [r14 + rcx*8]
call fcn.14004dd80
mov r12, rax
test rax, rax
je 0x140048873
lea rcx, [rax + 0x308]
call fcn.14004dd80
mov rbx, rax
test rax, rax
je 0x140048873
cmp rax, qword [0x140078af8]
je 0x140048873
lea rcx, [rax + 0x318]
call fcn.14004dd80
mov r13, rax
test rax, rax
je 0x140048873
lea rcx, [rbx + 0x198]
call fcn.14004dd80
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
movsd qword [rbp + 0xe0], xmm6
lea rcx, [rax + 0x120]
mov r8d, 0x18
lea rdx, [rbp + 0xd0]
call fcn.140043c30
movsd xmm0, qword [rbp + 0xd8]
subsd xmm0, qword [0x140076528]
cvtpd2ps xmm0, xmm0
movss xmm7, dword [0x14006a7d8]
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm6, xmm0
movsd xmm0, qword [rbp + 0xd0]
subsd xmm0, qword [0x140076520]
cvtpd2ps xmm0, xmm0
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
movsd xmm1, qword [rbp + 0xe0]
subsd xmm1, qword [0x140076530]
cvtpd2ps xmm0, xmm1
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm6
ja 0x140047731
xorps xmm0, xmm0
sqrtss xmm0, xmm6
jmp 0x140047739
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvtss2sd xmm0, xmm0
divsd xmm0, qword [0x14006a838]
xorps xmm14, xmm14
cvtsd2ss xmm14, xmm0
movss dword [rbp + 0x70], xmm14
mov r8d, WSAStartup
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.140044900
movups xmm7, xmmword [rsp + 0x40]
movaps xmmword [rbp + 0x20], xmm7
movsd xmm6, qword [rsp + 0x50]
movsd qword [rbp + 0x30], xmm6
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x60]
call fcn.1400444b0
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp + 0x80]
call fcn.140044900
movups xmm0, xmmword [rbp + 0x80]
movaps xmmword [rbp + 0xf0], xmm0
movsd xmm1, qword [rbp + 0x90]
movsd qword [rbp + 0x100], xmm1
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x50]
call fcn.1400444b0
addsd xmm6, qword [0x14006a808]
movsd qword [rsp + 0x40], xmm7
unpckhpd xmm7, xmm7
movsd qword [rsp + 0x48], xmm7
movsd qword [rsp + 0x50], xmm6
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.1400444b0
movsd xmm10, qword [rbp + 0x48]
movaps xmm0, xmm10
movsd xmm12, qword [rbp + 0x58]
subsd xmm0, xmm12
andps xmm0, xmmword [0x14006ab20]
cvtpd2ps xmm8, xmm0
movaps xmm7, xmm8
mulss xmm7, xmm13
cmp byte [0x140078ac3], 0
je 0x1400487d0
movss xmm0, dword [0x1400761d0]
comiss xmm0, xmm14
jb 0x1400487d0
movsd xmm11, qword [rbp + 0x40]
cmp byte [0x140078ac7], 0
je 0x14004796c
mov ecx, dword [0x140078abc]
test ecx, ecx
je 0x1400478ff
cmp ecx, 1
jne 0x14004796c
lea rcx, [r13 + 0x2e8]
call fcn.14004dec0
movaps xmm6, xmm0
lea rcx, [r13 + 0x2f0]
call fcn.14004dec0
addss xmm0, xmm15
cvtpd2ps xmm1, xmm10
lea rax, [rsp + 0x40]
movaps xmm2, xmm7
mov qword [rsp + 0x20], rax
comiss xmm0, xmm6
jb 0x1400478d0
movups xmm0, xmmword [0x140076500]
movdqa xmmword [rsp + 0x40], xmm0
movaps xmm4, xmm7
mulss xmm4, xmm13
cvtps2pd xmm0, xmm4
movaps xmm5, xmm11
subsd xmm5, xmm0
cvtpd2ps xmm0, xmm5
movaps xmm3, xmm8
call fcn.140046770
jmp 0x14004796c
movups xmm0, xmmword [0x1400765d8]
movdqa xmmword [rsp + 0x40], xmm0
mulss xmm2, xmm13
cvtps2pd xmm0, xmm2
movaps xmm3, xmm11
subsd xmm3, xmm0
cvtpd2ps xmm0, xmm3
movaps xmm3, xmm8
movaps xmm2, xmm7
call fcn.140046770
jmp 0x14004796c
lea rcx, [r13 + 0x2e8]
call fcn.14004dec0
movaps xmm6, xmm0
lea rcx, [r13 + 0x2f0]
call fcn.14004dec0
addss xmm0, xmm15
cvttss2si r9d, xmm8
cvttss2si r8d, xmm7
cvttsd2si edx, xmm10
movaps xmm1, xmm11
lea rax, [rsp + 0x40]
mulss xmm7, xmm13
mov qword [rsp + 0x20], rax
comiss xmm0, xmm6
jb 0x14004794f
movups xmm0, xmmword [0x140076500]
jmp 0x140047956
movups xmm0, xmmword [0x1400765d8]
movdqa xmmword [rsp + 0x40], xmm0
cvtps2pd xmm0, xmm7
subsd xmm1, xmm0
cvttsd2si ecx, xmm1
call fcn.140046350
cmp byte [0x140078ac0], 0
je 0x140047c29
mov esi, r15d
lea rdi, [0x140076544]
movss xmm13, dword [0x14006a7d8]
movss xmm14, dword [0x14006a7b0]
nop word [rax + rax]
mov ebx, dword [rdi]
mov r8d, dword [rdi - 4]
mov rdx, r13
lea rcx, [rbp + 0xf0]
call fcn.140044900
mov r8d, ebx
mov rdx, r13
lea rcx, [rbp + 0x20]
call fcn.140044900
movups xmm0, xmmword [rbp + 0xf0]
movaps xmmword [rbp + 0x80], xmm0
movsd xmm1, qword [rbp + 0x100]
movsd qword [rbp + 0x90], xmm1
lea rdx, [rbp + 0x80]
lea rcx, [rbp]
call fcn.1400444b0
movups xmm0, xmmword [rbp + 0x20]
movaps xmmword [rsp + 0x40], xmm0
movsd xmm1, qword [rbp + 0x30]
movsd qword [rsp + 0x50], xmm1
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x10]
call fcn.1400444b0
lea rcx, [r13 + 0x2e8]
call fcn.14004dec0
movaps xmm6, xmm0
lea rcx, [r13 + 0x2f0]
call fcn.14004dec0
addss xmm0, xmm15
mov rax, qword [0x140078980]
lea r8, str.Foreground
mov edx, 1
mov rax, qword [rax + 0x48b0]
mov rcx, qword [rax]
comiss xmm0, xmm6
jb 0x140047b24
call fcn.140007300
mov r10, rax
movaps xmm0, xmmword [0x14006aa60]
movups xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call fcn.140003640
movsd xmm9, qword [rbp - 8]
cvtpd2ps xmm9, xmm9
movsd xmm7, qword [rbp - 0x10]
cvtpd2ps xmm7, xmm7
movss dword [rbp - 0x70], xmm7
movss dword [rbp - 0x6c], xmm9
movsd xmm8, qword [rbp + 8]
cvtpd2ps xmm8, xmm8
movsd xmm6, qword [rbp]
cvtpd2ps xmm6, xmm6
movss dword [rbp - 0x68], xmm6
movss dword [rbp - 0x64], xmm8
movss dword [rsp + 0x20], xmm13
mov r9d, eax
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x68]
mov rcx, r10
call fcn.140027140
mov rax, qword [0x140078980]
mov rax, qword [rax + 0x48b0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007300
mov r10, rax
lea rcx, [0x140076498]
call fcn.140003640
movss dword [rbp - 0x60], xmm7
movss dword [rbp - 0x5c], xmm9
movss dword [rbp - 0x58], xmm6
movss dword [rbp - 0x54], xmm8
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x58]
jmp 0x140047be9
call fcn.140007300
mov r10, rax
movaps xmm0, xmmword [0x14006aa60]
movups xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call fcn.140003640
movsd xmm9, qword [rbp - 8]
cvtpd2ps xmm9, xmm9
movsd xmm7, qword [rbp - 0x10]
cvtpd2ps xmm7, xmm7
movss dword [rbp - 0x50], xmm7
movss dword [rbp - 0x4c], xmm9
movsd xmm8, qword [rbp + 8]
cvtpd2ps xmm8, xmm8
movsd xmm6, qword [rbp]
cvtpd2ps xmm6, xmm6
movss dword [rbp - 0x48], xmm6
movss dword [rbp - 0x44], xmm8
movss dword [rsp + 0x20], xmm13
mov r9d, eax
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x48]
mov rcx, r10
call fcn.140027140
mov rax, qword [0x140078980]
mov rax, qword [rax + 0x48b0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007300
mov r10, rax
lea rcx, [0x1400765c8]
call fcn.140003640
movss dword [rbp - 0x40], xmm7
movss dword [rbp - 0x3c], xmm9
movss dword [rbp - 0x38], xmm6
movss dword [rbp - 0x34], xmm8
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x38]
movss dword [rsp + 0x20], xmm14
mov r9d, eax
mov rcx, r10
call fcn.140027140
inc esi
add rdi, 8
cmp esi, 0x11
jb 0x1400479a0
movss xmm13, dword [0x14006a774]
movss xmm14, dword [rbp + 0x70]
movss xmm9, dword [0x14006a87c]
mov r14, qword [rbp + 0x10]
xor r15d, r15d
movsd xmm7, qword [rbp + 0x50]
cmp byte [0x140078ac1], 0
je 0x140047d3c
lea rcx, [r13 + 0x2e8]
call fcn.14004dec0
movaps xmm6, xmm0
lea rcx, [r13 + 0x2f0]
call fcn.14004dec0
addss xmm0, xmm15
mov rax, qword [0x140078980]
lea r8, str.Foreground
mov edx, 1
mov rax, qword [rax + 0x48b0]
mov rcx, qword [rax]
comiss xmm0, xmm6
jb 0x140047cd1
call fcn.140007300
mov r10, rax
lea rcx, [0x140076510]
call fcn.140003640
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm12
cvtpd2ps xmm0, xmm7
movss dword [rbp - 0x30], xmm0
movss dword [rbp - 0x2c], xmm1
movd xmm2, dword [0x140078b4c]
cvtdq2ps xmm2, xmm2
movd xmm0, dword [0x140078b38]
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x28], xmm0
movss dword [rbp - 0x24], xmm2
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x28]
jmp 0x140047d23
call fcn.140007300
mov r10, rax
lea rcx, [0x1400764b8]
call fcn.140003640
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm12
cvtpd2ps xmm0, xmm7
movss dword [rbp - 0x20], xmm0
movss dword [rbp - 0x1c], xmm1
movd xmm2, dword [0x140078b4c]
cvtdq2ps xmm2, xmm2
movd xmm0, dword [0x140078b38]
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm2
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x18]
movss xmm0, dword [0x14006a7b0]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
mov rcx, r10
call fcn.140027140
cmp byte [0x140078ac5], 0
je 0x140047eb8
mov rdx, r12
lea rcx, [rbp + 0xf0]
call fcn.140044c90
nop
lea rax, [rbp + 0xf0]
mov rcx, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
cmova rax, rcx
mov rbx, qword [0x140078980]
mov r10, qword [rbx + 0x3c08]
movss xmm0, dword [rbx + 0x3c10]
movss xmm6, dword [0x14006a8f0]
movss xmm8, dword [0x14006a914]
test rax, rax
jne 0x140047da7
xorps xmm2, xmm2
jmp 0x140047e05
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm6
movaps xmm2, xmm0
lea rdx, [rsp + 0x68]
mov rcx, r10
call fcn.14002bc90
movss xmm0, dword [rsp + 0x68]
addss xmm0, dword [0x14006a7a8]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [rsp + 0x68], xmm2
movss xmm0, dword [rsp + 0x6c]
mov r10, qword [rbx + 0x3c08]
mov rdx, qword [rbp + 0x108]
mov rcx, qword [rbp + 0xf0]
lea rax, [rbp + 0xf0]
cmp rdx, 0xf
cmova rax, rcx
movaps xmm1, xmm10
subsd xmm1, qword [0x14006a7f8]
mulss xmm0, xmm13
cvtps2pd xmm0, xmm0
subsd xmm1, xmm0
xorps xmm3, xmm3
cvtsd2ss xmm3, xmm1
mulss xmm2, xmm13
cvtps2pd xmm0, xmm2
movaps xmm1, xmm11
subsd xmm1, xmm0
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm1
movaps xmm0, xmmword [0x14006aae0]
movaps xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
unpcklps xmm2, xmm3
movq r8, xmm2
movaps xmm1, xmm9
mov rcx, r10
call fcn.140045ed0
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x140047ec9
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047eb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400488ed
call fcn.14005efdc
jmp 0x140047ec9
movss xmm6, dword [0x14006a8f0]
movss xmm8, dword [0x14006a914]
cmp byte [0x140078ac4], 0
je 0x140048425
lea rcx, [r12 + 0x438]
call fcn.14004dd80
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
mov dword [rbp + 0xa1], r15d
mov word [rbp + 0xa5], r15w
mov byte [rbp + 0xa7], 0
mov dword [rbp + 0x80], 0x83b3b69
mov qword [rbp + 0x88], rax
lea rax, [rbp + 0x130]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], 0x80
mov eax, dword [0x1400789a8]
mov dword [rbp + 0x84], eax
mov byte [rbp + 0xa0], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, 0x28
lea r8, [rbp + 0x80]
mov edx, 0x224d14
mov rcx, qword [0x1400789a0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], r15
lea rax, [rbp + 0x130]
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140047fd0
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
ja 0x140048909
cmp rbx, 7
ja 0x14004802c
mov qword [rbp + 0xc0], rbx
mov qword [rbp + 0xc8], 7
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0xb0]
call sub.VCRUNTIME140.dll_memcpy
mov word [rbp + rbx + 0xb0], r15w
jmp 0x1400480e8
mov rsi, rbx
or rsi, 7
cmp rsi, rax
jbe 0x14004804b
mov rsi, rax
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14004807b
cmp rsi, 0xa
mov eax, 0xa
cmovb rsi, rax
lea rcx, [rsi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14004891b
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400480a7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004891b
mov rcx, rax
call fcn.14005f3b4
test rax, rax
je 0x1400488fb
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400480b9
test rcx, rcx
je 0x1400480b6
call fcn.14005f3b4
mov rdi, rax
jmp 0x1400480b9
mov rdi, r15
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xc0], rbx
mov qword [rbp + 0xc8], rsi
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x130]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [rdi + rbx], r15w
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 7
seta r8b
cmova rdx, qword [rbp + 0xb0]
mov rax, qword [rbp + 0xc0]
lea rsi, [rdx + rax*2]
lea rdi, [rbp + 0xb0]
test r8b, r8b
cmovne rdi, qword [rbp + 0xb0]
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r15
cmp rdi, rsi
jne 0x14004814e
mov ecx, 0xf
mov qword [rbp + 0x108], rcx
mov byte [rbp + 0xf0], 0
jmp 0x140048276
sub rsi, rdi
sar rsi, 1
mov qword [rbp + 0x108], 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x140048915
mov ebx, 0xf
cmp rsi, rbx
jbe 0x140048223
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
jbe 0x14004819f
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400481c6
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400481f6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004890f
mov rcx, rax
call fcn.14005f3b4
mov rcx, rax
test rax, rax
je 0x1400488f4
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0x108], rbx
jmp 0x14004822a
test rcx, rcx
je 0x140048210
call fcn.14005f3b4
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0x108], rbx
jmp 0x14004822a
mov rax, r15
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0x108], rbx
jmp 0x14004822a
mov rax, qword [rbp + 0xf0]
lea r8, [rbp + 0xf0]
cmp rbx, 0xf
cmova r8, rax
mov rcx, r8
mov rdx, rsi
test rsi, rsi
je 0x140048263
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rdi]
mov byte [rcx], al
lea rcx, [rcx + 1]
lea rdi, [rdi + 2]
sub rdx, 1
jne 0x140048250
mov qword [rbp + 0x100], rsi
mov byte [r8 + rsi], 0
mov rcx, qword [rbp + 0x108]
lea rax, [rbp + 0xf0]
mov rdx, qword [rbp + 0xf0]
cmp rcx, 0xf
cmova rax, rdx
mov rbx, qword [0x140078980]
movss xmm0, dword [rbx + 0x3c10]
test rax, rax
jne 0x1400482a5
xorps xmm1, xmm1
jmp 0x140048300
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm6
movaps xmm2, xmm0
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x3c08]
call fcn.14002bc90
movss xmm0, dword [rsp + 0x70]
addss xmm0, dword [0x14006a7a8]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rsp + 0x70], xmm1
movss xmm0, dword [rsp + 0x74]
mov rcx, qword [rbp + 0x108]
mov rdx, qword [rbp + 0xf0]
lea rax, [rbp + 0xf0]
mulss xmm0, xmm13
xorps xmm2, xmm2
mulss xmm1, xmm13
lea r9, [rsp + 0x40]
cvtps2pd xmm0, xmm0
cmp byte [0x140078ac5], 0
je 0x140048330
subsd xmm10, qword [0x14006a810]
jmp 0x140048339
subsd xmm10, qword [0x14006a7f8]
subsd xmm10, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
subsd xmm11, xmm0
cvtsd2ss xmm2, xmm10
cvtsd2ss xmm1, xmm11
cmp rcx, 0xf
unpcklps xmm1, xmm2
cmova rax, rdx
movaps xmm0, xmmword [0x14006aae0]
movq r8, xmm1
mov qword [rsp + 0x20], rax
movaps xmmword [rsp + 0x40], xmm0
movaps xmm1, xmm9
mov rcx, qword [rbx + 0x3c08]
call fcn.140045ed0
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x1400483c6
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400483c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400488f4
call fcn.14005efdc
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], 0xf
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 7
jbe 0x140048425
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048420
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400488fb
call fcn.14005efdc
cmp byte [0x140078ac6], 0
je 0x14004853b
xorps xmm2, xmm2
cvtss2sd xmm2, xmm14
movq r8, xmm2
lea rdx, str._.fm
lea rcx, [rbp + 0xf0]
call fcn.14004e610
mov rbx, qword [0x140078980]
mov qword [rsp + 0x30], r15
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x28], rax
movss xmm6, dword [0x14006a914]
movss dword [rsp + 0x20], xmm6
movss xmm11, dword [0x14006a8f0]
movaps xmm3, xmm11
movss xmm2, dword [rbx + 0x3c10]
lea rdx, [rsp + 0x78]
mov rcx, qword [rbx + 0x3c08]
call fcn.14002bc90
movss xmm0, dword [rsp + 0x78]
movss xmm8, dword [0x14006a7a8]
addss xmm0, xmm8
cvttss2si eax, xmm0
movd xmm3, eax
cvtdq2ps xmm3, xmm3
movss dword [rsp + 0x78], xmm3
movaps xmm2, xmm12
movsd xmm10, qword [0x14006a7f8]
addsd xmm2, xmm10
movss xmm0, dword [rsp + 0x7c]
mulss xmm0, xmm13
cvtps2pd xmm1, xmm0
subsd xmm2, xmm1
xorps xmm4, xmm4
cvtsd2ss xmm4, xmm2
mulss xmm3, xmm13
cvtps2pd xmm0, xmm3
movaps xmm1, xmm7
subsd xmm1, xmm0
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm1
movaps xmm0, xmmword [0x14006aae0]
movaps xmmword [rsp + 0x40], xmm0
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
unpcklps xmm2, xmm4
movq r8, xmm2
movaps xmm1, xmm9
mov rcx, qword [rbx + 0x3c08]
call fcn.140045ed0
jmp 0x14004855e
movss xmm11, dword [0x14006a8f0]
movss xmm6, dword [0x14006a914]
movss xmm8, dword [0x14006a7a8]
movsd xmm10, qword [0x14006a7f8]
cmp byte [0x140078ac2], 0
je 0x1400487c8
lea rcx, [r12 + 0x9f0]
call fcn.14004dd80
mov dword [rbp + 0x70], r15d
mov dword [rbp + 0xa1], r15d
mov word [rbp + 0xa5], r15w
mov byte [rbp + 0xa7], 0
mov dword [rbp + 0x80], 0x83b3b69
add rax, 0xc8
mov qword [rbp + 0x88], rax
lea rax, [rbp + 0x70]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], 4
mov eax, dword [0x1400789a8]
mov dword [rbp + 0x84], eax
mov byte [rbp + 0xa0], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, 0x28
lea r8, [rbp + 0x80]
mov edx, 0x224d14
mov rcx, qword [0x1400789a0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movsxd rbx, dword [rbp + 0x70]
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140078b50], eax
jle 0x140048652
lea rcx, [0x140078b50]
call fcn.14005f0fc
cmp dword [0x140078b50], 0xffffffff
jne 0x140048652
lea rcx, [0x140060a50]
call fcn.14005f39c
lea rcx, [0x140078b50]
call fcn.14005f090
lea rcx, [rbp + 0xf0]
cmp ebx, 0x11
ja 0x140048671
mov rdx, rbx
shl rdx, 5
lea rax, str.Bronze_1
add rdx, rax
jmp 0x140048678
lea rdx, str.Unranked
call fcn.14004db10
nop
lea rax, [rbp + 0xf0]
mov rcx, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
cmova rax, rcx
mov rbx, qword [0x140078980]
movss xmm0, dword [rbx + 0x3c10]
test rax, rax
jne 0x1400486b4
xorps xmm1, xmm1
jmp 0x140048708
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm11
movaps xmm2, xmm0
lea rdx, [rbp - 0x80]
mov rcx, qword [rbx + 0x3c08]
call fcn.14002bc90
movss xmm0, dword [rbp - 0x80]
addss xmm0, xmm8
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x80], xmm1
movss xmm0, dword [rbp - 0x7c]
mov rdx, qword [rbp + 0x108]
mov rcx, qword [rbp + 0xf0]
lea rax, [rbp + 0xf0]
mulss xmm0, xmm13
xorps xmm2, xmm2
mulss xmm1, xmm13
lea r9, [rsp + 0x40]
cvtps2pd xmm0, xmm0
cmp byte [0x140078ac6], 0
je 0x140048738
addsd xmm12, qword [0x14006a810]
jmp 0x14004873d
addsd xmm12, xmm10
subsd xmm12, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
subsd xmm7, xmm0
cvtsd2ss xmm2, xmm12
cvtsd2ss xmm1, xmm7
cmp rdx, 0xf
unpcklps xmm1, xmm2
cmova rax, rcx
movaps xmm0, xmmword [0x14006aae0]
movq r8, xmm1
mov qword [rsp + 0x20], rax
movaps xmmword [rsp + 0x40], xmm0
movaps xmm1, xmm9
mov rcx, qword [rbx + 0x3c08]
call fcn.140045ed0
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x1400487c8
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400487c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140048902
call fcn.14005efdc
mov edi, dword [rsp + 0x60]
mov rsi, qword [rbp - 0x78]
mov eax, dword [0x140078b4c]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [rbp + 0x68]
movsd xmm1, qword [0x14006a7e0]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
mov eax, dword [0x140078b40]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [rbp + 0x60]
movsd xmm1, qword [0x14006a7e0]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm6
ja 0x140048833
xorps xmm0, xmm0
sqrtsd xmm0, xmm6
jmp 0x14004883b
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movss xmm1, dword [0x1400761cc]
cvtps2pd xmm1, xmm1
xorps xmm6, xmm6
comisd xmm1, xmm0
jb 0x140048873
movss xmm1, dword [0x140078b00]
cvtps2pd xmm1, xmm1
comisd xmm1, xmm0
jbe 0x140048873
cvtsd2ss xmm0, xmm0
movss dword [0x140078b00], xmm0
mov qword [0x140078ad8], r13
inc edi
mov dword [rsp + 0x60], edi
movsxd rcx, edi
cmp rcx, rsi
jb 0x140047630
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.14005ed70
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043e60
nop
call fcn.140043dc0
int3
call fcn.140043e60
nop
call fcn.140043dc0
int3
push rbp
mov rbp, rsp
sub rsp, 0x80
cmp byte [0x140078ab8], 0
je 0x140049476
cmp byte [0x140078ab6], 0
movaps xmmword [rsp + 0x50], xmm8
movaps xmmword [rsp + 0x40], xmm9
je 0x140048f64
mov ecx, dword [0x140078a98]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140048f64
call fcn.140045800
cmp byte [0x140078ab4], 0
je 0x140048f83
mov ecx, dword [0x140078a98]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140048f83
call fcn.140045ba0
cmp byte [0x140078ab9], 0
movss xmm8, dword [0x14006a7d8]
movss xmm9, dword [0x14006a7b0]
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rdi
movaps xmmword [rsp + 0x70], xmm6
je 0x1400492b7
mov rax, qword [0x140078980]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x48b0]
mov rcx, qword [rcx]
call fcn.140007300
movaps xmm0, xmmword [0x14006aa60]
mov ecx, 1
movups xmmword [rbp - 0x50], xmm0
mov rbx, rax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
movss dword [rbp + 0x14], xmm6
cdq
sub eax, edx
sar eax, 1
add eax, 8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x10], xmm0
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea rcx, [rbp - 0x50]
movss dword [rbp + 0x1c], xmm6
cdq
sub eax, edx
sar eax, 1
sub eax, 8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x18], xmm0
call fcn.140003640
mov r9d, eax
movss dword [rsp + 0x20], xmm8
lea rdx, [rbp + 0x18]
mov rcx, rbx
lea r8, [rbp + 0x10]
call fcn.140027140
mov rax, qword [0x140078980]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x48b0]
mov rcx, qword [rcx]
call fcn.140007300
movaps xmm0, xmmword [0x14006aa60]
mov ecx, 1
movups xmmword [rbp - 0x50], xmm0
mov rbx, rax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
add eax, 8
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
movss dword [rbp + 0x14], xmm6
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x10], xmm0
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
xor ecx, ecx
sub eax, 8
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea rcx, [rbp - 0x50]
movss dword [rbp + 0x1c], xmm6
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x18], xmm0
call fcn.140003640
mov r9d, eax
movss dword [rsp + 0x20], xmm8
lea rdx, [rbp + 0x18]
mov rcx, rbx
lea r8, [rbp + 0x10]
call fcn.140027140
mov rax, qword [0x140078980]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x48b0]
mov rcx, qword [rcx]
call fcn.140007300
lea rcx, [0x1400764a8]
mov rdi, rax
call fcn.140003640
mov ecx, 1
mov ebx, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
movss dword [rbp + 0x14], xmm6
cdq
sub eax, edx
sar eax, 1
add eax, 8
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x10], xmm0
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov r9d, ebx
movss dword [rbp + 0x1c], xmm6
cdq
movss dword [rsp + 0x20], xmm9
sub eax, edx
lea r8, [rbp + 0x10]
sar eax, 1
lea rdx, [rbp + 0x18]
sub eax, 8
mov rcx, rdi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x18], xmm0
call fcn.140027140
mov rax, qword [0x140078980]
lea r8, str.Foreground
mov rdx, qword [rax + 0x48b0]
mov rcx, qword [rdx]
mov edx, 1
call fcn.140007300
lea rcx, [0x1400764a8]
mov rdi, rax
call fcn.140003640
mov ebx, eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
add eax, 8
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
movss dword [rbp + 0x14], xmm6
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x10], xmm0
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
sub eax, 8
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov r9d, ebx
movss dword [rbp + 0x1c], xmm6
cdq
movss dword [rsp + 0x20], xmm9
sub eax, edx
lea r8, [rbp + 0x10]
sar eax, 1
lea rdx, [rbp + 0x18]
mov rcx, rdi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x18], xmm0
call fcn.140027140
cmp byte [0x140078ab5], 0
je 0x140049455
mov rax, qword [0x140078980]
lea r8, str.Foreground
mov edx, 1
movaps xmmword [rsp + 0x60], xmm7
mov rcx, qword [rax + 0x48b0]
mov rcx, qword [rcx]
call fcn.140007300
movaps xmm0, xmmword [0x14006aa60]
lea rcx, [rbp - 0x50]
movups xmmword [rbp - 0x50], xmm0
mov rbx, rax
call fcn.140003640
movss xmm6, dword [0x14006a774]
mov edi, eax
mov rax, qword [0x140078980]
movss xmm7, dword [0x14006a868]
movss xmm0, dword [rax + 0x10]
mulss xmm0, xmm6
movss dword [rbp + 0x10], xmm0
movss xmm0, dword [rax + 0x14]
mulss xmm0, xmm6
movss dword [rbp + 0x14], xmm0
test edi, 0xff000000
je 0x1400493a0
movss xmm2, dword [0x1400761cc]
comiss xmm6, xmm2
ja 0x1400493a0
subss xmm2, xmm6
mov dword [rsp + 0x28], 0x63
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm7
lea rdx, [rbp + 0x10]
mov rcx, rbx
call fcn.1400267a0
mov r8d, dword [rbx + 0x78]
mov r9d, edi
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
movss dword [rsp + 0x28], xmm8
mov dword [rsp + 0x20], 1
call fcn.140024d60
mov rax, qword [0x140078980]
mov dword [rbx + 0x78], 0
mov rax, qword [rax + 0x48b0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140007300
lea rcx, [0x140076488]
mov rbx, rax
call fcn.140003640
mov rcx, qword [0x140078980]
mov edi, eax
movss xmm0, dword [rcx + 0x10]
movss xmm1, dword [rcx + 0x14]
mulss xmm0, xmm6
mulss xmm1, xmm6
movss dword [rbp + 0x10], xmm0
movss dword [rbp + 0x14], xmm1
test eax, 0xff000000
je 0x140049450
movss xmm2, dword [0x1400761cc]
comiss xmm6, xmm2
ja 0x140049450
subss xmm2, xmm6
mov dword [rsp + 0x28], 0x63
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm7
lea rdx, [rbp + 0x10]
mov rcx, rbx
call fcn.1400267a0
mov r8d, dword [rbx + 0x78]
mov r9d, edi
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 1
call fcn.140024d60
mov dword [rbx + 0x78], 0
movaps xmm7, xmmword [rsp + 0x60]
mov rdi, qword [rsp + 0xa8]
movaps xmm6, xmmword [rsp + 0x70]
mov rbx, qword [rsp + 0xa0]
movaps xmm8, xmmword [rsp + 0x50]
movaps xmm9, xmmword [rsp + 0x40]
add rsp, 0x80
pop rbp
jmp 0x1400473b0