Function at 0x140010f20
Capabilities:
Log keystrokes via polling
Open clipboard
Write clipboard data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [0x14006f010]
xor rax, rsp
mov qword [rbp + 0x128], rax
mov rbx, r8
mov rax, rdx
mov qword [rbp + 0x28], rdx
mov r15, qword [rbp + 0x190]
test r8d, r8d
jne 0x140010f8a
mov rcx, rbx
shr rcx, 0x20
test ecx, ecx
jne 0x140010f8a
mov qword [rdx], 0xffffffffffffffff
mov qword [rdx + 8], 0xffffffffffffffff
jmp 0x14001220b
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor r12d, r12d
mov r13d, dword [rbp + 0x184]
cmp rax, qword [0x14006ff28]
jne 0x1400114d3
lea r8d, [r13 + 0x36]
lea r10d, [rbx + 0x168]
mov edx, dword [0x14006ff48]
mov eax, dword [0x14006ff50]
cmp edx, eax
jl 0x1400114d3
cmp edx, dword [0x14006ff58]
jg 0x1400114d3
mov ecx, dword [0x14006ff4c]
mov r9d, dword [0x14006ff54]
cmp ecx, r9d
jl 0x1400114d3
cmp ecx, dword [0x14006ff5c]
jg 0x1400114d3
sub edx, eax
cmp edx, r10d
jl 0x1400114d3
lea eax, [r10 + 0x14]
cmp edx, eax
jg 0x1400114d3
sub ecx, r9d
cmp ecx, r8d
jl 0x1400114d3
lea eax, [r8 + 0x14]
cmp ecx, eax
jg 0x1400114d3
lea ecx, [r12 + 1]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1400114d3
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 4]
call qword [sym.imp.USER32.dll_mouse_event]
cmp dword [0x14006ff68], r12d
jne 0x1400114d3
mov edx, dword [r15 + 0xc]
lea rcx, [rbp + 0xb0]
call fcn.1400326f0
mov edx, dword [r15 + 4]
lea rcx, [rbp - 0x18]
call fcn.1400326f0
mov edx, dword [r15]
lea rcx, [rbp + 8]
call fcn.1400326f0
lea r8d, [r12 + 2]
lea rdx, [0x1400670a8]
lea rcx, [rbp + 8]
call fcn.1400325e0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea r9, [rbp - 0x18]
lea r8, [rbp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.140063680
lea r8d, [r12 + 2]
lea rdx, [0x1400670a8]
lea rcx, [rsp + 0x40]
call fcn.1400325e0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov edx, dword [r15 + 8]
lea rcx, [rbp + 0x90]
call fcn.1400326f0
lea r9, [rbp + 0x90]
lea r8, [rbp + 0x50]
lea rcx, [rbp + 0x108]
call fcn.140063680
lea r8d, [r12 + 2]
lea rdx, [0x1400670a8]
lea rcx, [rbp + 0x108]
call fcn.1400325e0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea r9, [rbp + 0xb0]
lea r8, [rbp + 0x70]
lea rcx, [rbp + 0xd0]
call fcn.140063680
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x1400111b3
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400111ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113c9
call fcn.1400643f0
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x1400111f4
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400111ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113c9
call fcn.1400643f0
movdqa xmm0, xmmword [0x1400691c0]
movdqu xmmword [rbp + 0x118], xmm0
mov byte [rbp + 0x108], r12b
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140011246
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011241
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113c9
call fcn.1400643f0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140011283
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001127e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113c9
call fcn.1400643f0
movdqa xmm0, xmmword [0x1400691c0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], r12b
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x1400112d1
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400112cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113c9
call fcn.1400643f0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x14001130c
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011307
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113c9
call fcn.1400643f0
movdqa xmm0, xmmword [0x1400691c0]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], r12b
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x140011354
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001134f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113c9
call fcn.1400643f0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x140011391
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001138c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400113c9
call fcn.1400643f0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x1400113d5
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400113d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400113d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400643f0
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
call qword [sym.imp.USER32.dll_EmptyClipboard]
lea rax, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0x10
cmovae rax, qword [rbp + 0xd0]
mov rdi, 0xffffffffffffffff
mov rdx, rdi
inc rdx
cmp byte [rax + rdx], r12b
jne 0x140011404
inc rdx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov rsi, rax
lea r9, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0x10
cmovae r9, qword [rbp + 0xd0]
lea r14, [rbp + 0xd0]
cmovae r14, qword [rbp + 0xd0]
lea rdi, [rdi + 1]
cmp byte [r9 + rdi], r12b
jne 0x140011441
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov rcx, rax
mov r8, r14
lea rdx, [rdi + 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov rdx, rsi
mov ecx, 1
call qword [sym.imp.USER32.dll_SetClipboardData]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
call qword [sym.imp.USER32.dll_CloseClipboard]
mov edx, 0x14
lea ecx, [rdx + 0x50]
call qword [sym.imp.KERNEL32.dll_Beep]
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x1400114d3
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400114ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400114ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400643f0
movzx esi, r12w
lea eax, [r13 + 0x3c]
mov dword [rsp + 0x34], eax
lea r14d, [rax - 6]
mov dword [rsp + 0x30], r14d
nop dword [rax + rax]
mov eax, dword [r15]
mov dword [rbp - 0x18], eax
mov eax, dword [r15 + 4]
mov dword [rbp - 0x14], eax
mov eax, dword [r15 + 8]
mov dword [rbp - 0x10], eax
mov eax, dword [r15 + 0xc]
mov dword [rbp - 0xc], eax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r12
mov edx, 4
lea rcx, [rbp + 0x108]
call fcn.140063ad0
mov r8d, 0x10
lea rdx, [rbp - 0x18]
mov rdi, qword [rbp + 0x108]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
movsx eax, si
imul r12d, eax, 0x2e
lea r13d, [rbx + 0xac]
add r13d, r12d
mov rdx, qword [0x14006ff48]
mov rax, qword [0x14006ff50]
cmp edx, eax
jl 0x1400115b4
cmp edx, dword [0x14006ff58]
jg 0x1400115b4
mov rcx, qword [0x14006ff4c]
mov r8, qword [0x14006ff54]
cmp ecx, r8d
jl 0x1400115b4
cmp ecx, dword [0x14006ff5c]
jg 0x1400115b4
sub edx, eax
cmp edx, r13d
jl 0x1400115b4
lea eax, [r13 + 0x29]
cmp edx, eax
jg 0x1400115b4
sub ecx, r8d
cmp ecx, r14d
jl 0x1400115b4
lea eax, [r14 + 0x14]
cmp ecx, eax
jg 0x1400115b4
mov r14d, 1
jmp 0x1400115b7
xor r14d, r14d
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x14006ff28]
jne 0x1400116a0
test r14d, r14d
je 0x1400116a0
cmp dword [0x14006ff68], 0
jne 0x1400116a0
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140011615
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 4]
call qword [sym.imp.USER32.dll_mouse_event]
movsx rax, si
inc dword [rdi + rax*4]
jmp 0x140011648
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140011648
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x10]
call qword [sym.imp.USER32.dll_mouse_event]
movsx rax, si
dec dword [rdi + rax*4]
mov ecx, 0x25
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140011675
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
movsx rax, si
add dword [rdi + rax*4], 5
jmp 0x1400116a0
mov ecx, 0x27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1400116a0
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
movsx rax, si
add dword [rdi + rax*4], 0xfffffffb
movsx rax, si
mov ecx, dword [rdi + rax*4]
cmp ecx, 0xff
jl 0x1400116b8
mov dword [rdi + rax*4], 0xff
jmp 0x1400116c3
test ecx, ecx
jg 0x1400116c3
mov dword [rdi + rax*4], 0
mov ecx, dword [rdi + 4]
mov edx, dword [rdi + 8]
mov r8d, dword [rdi + 0xc]
mov eax, dword [rdi]
mov dword [r15], eax
mov dword [r15 + 4], ecx
mov dword [r15 + 8], edx
mov dword [r15 + 0xc], r8d
xor eax, eax
mov qword [rbp + 0x30], rax
mov word [rbp + 0xde], ax
mov word [rbp + 0xee], ax
mov dword [rbp + 0xf8], eax
mov dword [rbp + 0xfc], 1
shr rax, 0x20
movzx edx, al
shl edx, 8
mov dword [rbp + 0xd0], r13d
mov ecx, dword [rsp + 0x30]
mov dword [rbp + 0xd4], ecx
lea eax, [r13 + 0x29]
mov dword [rbp + 0xe0], eax
lea eax, [rcx + 0x14]
mov dword [rsp + 0x60], eax
mov dword [rbp + 0xe4], eax
movzx ecx, dl
shl cx, 8
mov word [rbp + 0xd8], cx
mov word [rbp + 0xda], dx
mov eax, edx
shr eax, 0x10
shl ax, 8
mov word [rbp + 0xdc], ax
mov word [rbp + 0xe8], cx
mov word [rbp + 0xea], dx
mov word [rbp + 0xec], ax
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea r9, [rbp + 0xf8]
mov r8d, 2
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x14006ff40]
call qword [sym.imp.MSIMG32.dll_GradientFill]
mov r13d, dword [rsp + 0x34]
lea r11d, [r13 - 5]
lea r10d, [rbx + 0xad]
add r10d, r12d
xor r12d, r12d
mov word [rbp + 0xde], r12w
mov word [rbp + 0xee], r12w
test r14d, r14d
je 0x1400118c2
mov dword [rbp + 0x70], 0x1e
mov dword [rbp + 0x74], 0x1e
mov eax, dword [0x14006ff14]
cdq
and edx, 3
lea r8d, [rdx + rax]
sar r8d, 2
mov dword [rbp + 0x50], r8d
mov eax, dword [0x14006ff18]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rbp + 0x54], eax
mov dword [rbp + 0x100], r12d
mov dword [rbp + 0x104], 1
mov rax, qword [rbp + 0x50]
shr rax, 0x20
movzx r9d, al
shl r9d, 8
mov eax, dword [0x14006ff1c]
cdq
and edx, 3
add eax, edx
sar eax, 2
movzx ecx, al
shl ecx, 0x10
or r9d, ecx
movzx eax, r8b
or r9d, eax
mov rax, qword [rbp + 0x70]
shr rax, 0x20
movzx ecx, al
shl ecx, 8
or ecx, 0x1e001e
lea eax, [r10 + 0x27]
mov dword [rbp + 0xe0], eax
lea eax, [r11 + 0x12]
mov dword [rbp + 0xe4], eax
movzx eax, r9b
shl ax, 8
mov word [rbp + 0xd8], ax
movzx eax, r9w
mov r14d, 0xff00
and ax, r14w
mov word [rbp + 0xda], ax
shr r9d, 0x10
shl r9w, 8
mov word [rbp + 0xdc], r9w
movzx eax, cl
shl ax, 8
mov word [rbp + 0xe8], ax
movzx eax, cx
and ax, r14w
lea r9, [rbp + 0x100]
jmp 0x1400119bd
mov dword [rsp + 0x40], 0x1e
mov dword [rsp + 0x44], 0x1e
mov eax, 0x66666667
imul dword [0x14006ff14]
mov ecx, edx
sar ecx, 1
mov eax, ecx
shr eax, 0x1f
add ecx, eax
mov dword [rbp + 8], ecx
mov eax, 0x66666667
imul dword [0x14006ff18]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rbp + 0xc], edx
mov dword [rbp + 0xf0], r12d
mov dword [rbp + 0xf4], 1
mov rax, qword [rbp + 8]
shr rax, 0x20
movzx r8d, al
shl r8d, 8
mov eax, 0x66666667
imul dword [0x14006ff1c]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dl
shl eax, 0x10
or r8d, eax
movzx eax, cl
or r8d, eax
mov rax, qword [rsp + 0x40]
shr rax, 0x20
movzx ecx, al
shl ecx, 8
or ecx, 0x1e001e
lea eax, [r10 + 0x27]
mov dword [rbp + 0xe0], eax
lea eax, [r11 + 0x12]
mov dword [rbp + 0xe4], eax
movzx eax, r8b
shl ax, 8
mov word [rbp + 0xd8], ax
movzx eax, r8w
mov edx, 0xff00
and ax, dx
mov word [rbp + 0xda], ax
shr r8d, 0x10
shl r8w, 8
mov word [rbp + 0xdc], r8w
movzx eax, cl
shl ax, 8
mov word [rbp + 0xe8], ax
movzx eax, cx
and ax, dx
lea r9, [rbp + 0xf0]
mov dword [rbp + 0xd4], r11d
mov dword [rbp + 0xd0], r10d
shr ecx, 0x10
shl cx, 8
mov dword [rsp + 0x28], 1
mov word [rbp + 0xec], cx
mov dword [rsp + 0x20], 1
mov word [rbp + 0xea], ax
mov r8d, 2
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x14006ff40]
call qword [sym.imp.MSIMG32.dll_GradientFill]
test rdi, rdi
je 0x140011a46
mov rdx, qword [rbp + 0x118]
sub rdx, rdi
and rdx, 0xfffffffffffffffc
mov rax, rdi
cmp rdx, 0x1000
jb 0x140011a3e
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011a59
mov rcx, rdi
call fcn.1400643f0
inc si
cmp si, 3
jg 0x140011a60
mov r14d, dword [rsp + 0x30]
jmp 0x1400114f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movdqa xmm0, xmmword [0x1400692b0]
movdqa xmmword [rsp + 0x40], xmm0
mov edx, dword [r15]
lea rcx, [rsp + 0x68]
call fcn.1400326f0
mov r8, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
sub rax, r8
mov edi, 3
lea r12, [0x1400670ac]
cmp rax, rdi
jb 0x140011b1a
lea rax, [r8 + 3]
mov qword [rsp + 0x78], rax
lea rsi, [rsp + 0x68]
cmp rcx, 0x10
cmovae rsi, qword [rsp + 0x68]
lea rax, [0x1400670af]
cmp rax, rsi
jbe 0x140011adc
lea rax, [rsi + r8]
cmp r12, rax
ja 0x140011adc
cmp rsi, r12
ja 0x140011ad4
xor eax, eax
mov r14d, eax
jmp 0x140011adf
mov r14, rsi
sub r14, r12
jmp 0x140011adf
mov r14, rdi
inc r8
lea rcx, [rsi + 3]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rdx, [r12 + 3]
add rdx, r14
lea rcx, [rsi + r14]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x68]
jmp 0x140011b31
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
mov rdx, rdi
lea rcx, [rsp + 0x68]
call fcn.140064160
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
xor r14d, r14d
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
add r13d, 0xfffffffe
lea edx, [rbx + 0xb1]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd0]
mov r8d, r13d
call fcn.14000b880
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x140011bcf
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011bca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011bca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400643f0
movdqa xmm0, xmmword [0x1400692b0]
movdqa xmmword [rsp + 0x40], xmm0
mov edx, dword [r15 + 4]
lea rcx, [rbp - 0x78]
call fcn.1400326f0
mov r8, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
sub rax, r8
lea r12, [0x1400670b0]
cmp rax, 3
jb 0x140011c7c
lea rax, [r8 + 3]
mov qword [rbp - 0x68], rax
lea rsi, [rbp - 0x78]
cmp rcx, 0x10
cmovae rsi, qword [rbp - 0x78]
lea rax, [0x1400670b3]
cmp rax, rsi
jbe 0x140011c3c
lea rax, [rsi + r8]
cmp r12, rax
ja 0x140011c3c
cmp rsi, r12
jbe 0x140011c3f
mov r14, rsi
sub r14, r12
jmp 0x140011c3f
mov r14, rdi
inc r8
lea rcx, [rsi + 3]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rdx, [r12 + 3]
add rdx, r14
lea rcx, [rsi + r14]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x78]
xor r14d, r14d
jmp 0x140011c92
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.140064160
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea edx, [rbx + 0xdf]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd0]
mov r8d, r13d
call fcn.14000b880
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140011d28
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011d23
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011d23
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400643f0
movdqa xmm0, xmmword [0x1400692b0]
movdqa xmmword [rsp + 0x40], xmm0
mov edx, dword [r15 + 8]
lea rcx, [rbp - 0x58]
call fcn.1400326f0
mov r8, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
sub rax, r8
lea r12, [0x1400670b4]
cmp rax, 3
jb 0x140011dd5
lea rax, [r8 + 3]
mov qword [rbp - 0x48], rax
lea rsi, [rbp - 0x58]
cmp rcx, 0x10
cmovae rsi, qword [rbp - 0x58]
lea rax, [0x1400670b7]
cmp rax, rsi
jbe 0x140011d95
lea rax, [rsi + r8]
cmp r12, rax
ja 0x140011d95
cmp rsi, r12
jbe 0x140011d98
mov r14, rsi
sub r14, r12
jmp 0x140011d98
mov r14, rdi
inc r8
lea rcx, [rsi + 3]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rdx, [r12 + 3]
add rdx, r14
lea rcx, [rsi + r14]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x58]
xor r14d, r14d
jmp 0x140011deb
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
mov rdx, rdi
lea rcx, [rbp - 0x58]
call fcn.140064160
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea edx, [rbx + 0x10d]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd0]
mov r8d, r13d
call fcn.14000b880
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x140011e81
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011e7c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011e7c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400643f0
movdqa xmm0, xmmword [0x1400692b0]
movdqa xmmword [rsp + 0x40], xmm0
mov edx, dword [r15 + 0xc]
lea rcx, [rbp - 0x38]
call fcn.1400326f0
mov r8, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
sub rax, r8
lea r12, [0x1400670b8]
cmp rax, 3
jb 0x140011f2e
lea rax, [r8 + 3]
mov qword [rbp - 0x28], rax
lea rsi, [rbp - 0x38]
cmp rcx, 0x10
cmovae rsi, qword [rbp - 0x38]
lea rax, [0x1400670bb]
cmp rax, rsi
jbe 0x140011eee
lea rax, [rsi + r8]
cmp r12, rax
ja 0x140011eee
cmp rsi, r12
jbe 0x140011ef1
mov r14, rsi
sub r14, r12
jmp 0x140011ef1
mov r14, rdi
inc r8
lea rcx, [rsi + 3]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
sub rdi, r14
lea rdx, [r12 + 3]
add rdx, r14
lea rcx, [rsi + r14]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x38]
xor r14d, r14d
jmp 0x140011f44
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
mov rdx, rdi
lea rcx, [rbp - 0x38]
call fcn.140064160
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea edx, [rbx + 0x13b]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd0]
mov r8d, r13d
call fcn.14000b880
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x140011fda
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011fd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011fd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400643f0
mov qword [rsp + 0x40], 0
lea ecx, [rbx + 0x168]
mov word [rbp + 0xde], r14w
mov word [rbp + 0xee], r14w
mov dword [rbp + 0xf0], r14d
mov dword [rbp + 0xf4], 1
mov rax, qword [rsp + 0x40]
shr rax, 0x20
movzx edx, al
shl edx, 8
mov dword [rbp + 0xd0], ecx
mov eax, dword [rsp + 0x30]
mov dword [rbp + 0xd4], eax
lea eax, [rcx + 0x14]
mov dword [rbp + 0xe0], eax
mov eax, dword [rsp + 0x60]
mov dword [rbp + 0xe4], eax
movzx ecx, dl
shl cx, 8
mov word [rbp + 0xd8], cx
mov word [rbp + 0xda], dx
mov eax, edx
shr eax, 0x10
shl ax, 8
mov word [rbp + 0xdc], ax
mov word [rbp + 0xe8], cx
mov word [rbp + 0xea], dx
mov word [rbp + 0xec], ax
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea r9, [rbp + 0xf0]
mov r8d, 2
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x14006ff40]
call qword [sym.imp.MSIMG32.dll_GradientFill]
mov eax, dword [r15]
cdq
and edx, 3
lea r11d, [rdx + rax]
sar r11d, 2
mov dword [rsp + 0x40], r11d
mov eax, dword [r15 + 4]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rsp + 0x44], eax
lea r8d, [rbx + 0x169]
mov word [rbp + 0xde], r14w
mov word [rbp + 0xee], r14w
mov dword [rbp + 0xf0], r14d
mov dword [rbp + 0xf4], 1
mov rdx, qword [r15]
mov rax, rdx
shr rax, 0x20
movzx r10d, al
shl r10d, 8
mov eax, dword [r15 + 8]
movzx ecx, al
shl ecx, 0x10
or r10d, ecx
movzx eax, dl
or r10d, eax
mov rax, qword [rsp + 0x40]
shr rax, 0x20
movzx r9d, al
shl r9d, 8
mov eax, dword [r15 + 8]
cdq
and edx, 3
add eax, edx
sar eax, 2
movzx ecx, al
shl ecx, 0x10
or r9d, ecx
movzx eax, r11b
or r9d, eax
mov dword [rbp + 0xd0], r8d
mov ecx, dword [rsp + 0x34]
add ecx, 0xfffffffb
mov dword [rbp + 0xd4], ecx
lea eax, [r8 + 0x12]
mov dword [rbp + 0xe0], eax
lea eax, [rcx + 0x12]
mov dword [rbp + 0xe4], eax
movzx eax, r10b
shl ax, 8
mov word [rbp + 0xd8], ax
movzx eax, r10w
mov ecx, 0xff00
and ax, cx
mov word [rbp + 0xda], ax
shr r10d, 0x10
shl r10w, 8
mov word [rbp + 0xdc], r10w
movzx eax, r9b
shl ax, 8
mov word [rbp + 0xe8], ax
movzx eax, r9w
and ax, cx
mov word [rbp + 0xea], ax
shr r9d, 0x10
shl r9w, 8
mov word [rbp + 0xec], r9w
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea r9, [rbp + 0xf0]
mov r8d, 2
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x14006ff40]
call qword [sym.imp.MSIMG32.dll_GradientFill]
movups xmm0, xmmword [r15]
mov rax, qword [rbp + 0x28]
movups xmmword [rax], xmm0
mov rcx, qword [rbp + 0x128]
xor rcx, rsp
call fcn.1400643d0
mov rbx, qword [rsp + 0x270]
add rsp, 0x230
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret