Function at 0x140012ec0
Capabilities:
Log keystrokes via polling
Open clipboard
Write clipboard data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [0x140081040]
xor rax, rsp
mov qword [rbp + 0x128], rax
mov rbx, r8
mov rax, rdx
mov qword [rbp + 0x28], rdx
mov r12, qword [rbp + 0x190]
test r8d, r8d
jne 0x140012f2a
mov rcx, rbx
shr rcx, 0x20
test ecx, ecx
jne 0x140012f2a
mov qword [rdx], 0xffffffffffffffff
mov qword [rdx + 8], 0xffffffffffffffff
jmp 0x1400141d6
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor r15d, r15d
mov r14d, dword [rbp + 0x184]
cmp rax, qword [0x140081fe8]
jne 0x14001348b
lea r8d, [r14 + 0x36]
lea r10d, [rbx + 0x168]
mov edx, dword [0x140082008]
mov eax, dword [0x140082010]
cmp edx, eax
jl 0x14001348b
cmp edx, dword [0x140082018]
jg 0x14001348b
mov ecx, dword [0x14008200c]
mov r9d, dword [0x140082014]
cmp ecx, r9d
jl 0x14001348b
cmp ecx, dword [0x14008201c]
jg 0x14001348b
sub edx, eax
cmp edx, r10d
jl 0x14001348b
lea eax, [r10 + 0x14]
cmp edx, eax
jg 0x14001348b
sub ecx, r9d
cmp ecx, r8d
jl 0x14001348b
lea eax, [r8 + 0x14]
cmp ecx, eax
jg 0x14001348b
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x14001348b
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 4
call qword [sym.imp.USER32.dll_mouse_event]
cmp dword [0x140082028], r15d
jne 0x14001348b
mov edx, dword [r12 + 4]
lea rcx, [rbp - 0x18]
call fcn.140039f80
mov edx, dword [r12 + 0xc]
lea rcx, [rbp + 0xb0]
call fcn.140039f80
mov edx, dword [r12 + 8]
lea rcx, [rbp + 0x90]
call fcn.140039f80
mov edx, dword [r12]
lea rcx, [rbp + 8]
call fcn.140039f80
mov r8d, 2
lea rdx, [0x1400780a8]
lea rcx, [rbp + 8]
call fcn.140039e70
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
lea r9, [rbp - 0x18]
lea r8, [rbp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.140073b40
mov r8d, 2
lea rdx, [0x1400780a8]
lea rcx, [rsp + 0x40]
call fcn.140039e70
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
lea r9, [rbp + 0x90]
lea r8, [rbp + 0x50]
lea rcx, [rbp + 0x108]
call fcn.140073b40
mov r8d, 2
lea rdx, [0x1400780a8]
lea rcx, [rbp + 0x108]
call fcn.140039e70
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
lea r9, [rbp + 0xb0]
lea r8, [rbp + 0x70]
lea rcx, [rbp + 0xd0]
call fcn.140073b40
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x14001315c
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013157
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013382
call fcn.1400748b0
mov rdx, qword [rbp + 0x120]
cmp rdx, 0xf
jbe 0x14001319d
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013198
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013382
call fcn.1400748b0
movdqa xmm0, xmmword [0x14007a660]
movdqu xmmword [rbp + 0x118], xmm0
mov byte [rbp + 0x108], r15b
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1400131f7
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400131ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013382
call fcn.1400748b0
movdqa xmm0, xmmword [0x14007a660]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14001323c
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001322f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013382
call fcn.1400748b0
movdqa xmm0, xmmword [0x14007a660]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], r15b
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x14001328a
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001327d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013382
call fcn.1400748b0
movdqa xmm0, xmmword [0x14007a660]
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x1400132cd
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400132c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013382
call fcn.1400748b0
movdqa xmm0, xmmword [0x14007a660]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], r15b
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x14001330d
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013308
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013382
call fcn.1400748b0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x14001334a
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013345
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013382
call fcn.1400748b0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x14001338e
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013389
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013389
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400748b0
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
call qword [sym.imp.USER32.dll_EmptyClipboard]
lea rax, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova rax, qword [rbp + 0xd0]
mov rdi, 0xffffffffffffffff
mov rdx, rdi
nop dword [rax]
inc rdx
cmp byte [rax + rdx], r15b
jne 0x1400133c0
inc rdx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov rsi, rax
lea r14, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova r14, qword [rbp + 0xd0]
lea r9, [rbp + 0xd0]
cmova r9, qword [rbp + 0xd0]
nop dword [rax]
lea rdi, [rdi + 1]
cmp byte [r9 + rdi], r15b
jne 0x140013400
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov rcx, rax
mov r8, r14
lea rdx, [rdi + 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov rdx, rsi
mov ecx, 1
call qword [sym.imp.USER32.dll_SetClipboardData]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
call qword [sym.imp.USER32.dll_CloseClipboard]
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x140013484
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001347f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001347f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400748b0
mov r14d, dword [rbp + 0x184]
movzx esi, r15w
nop
mov eax, dword [r12]
mov dword [rbp - 0x18], eax
mov eax, dword [r12 + 4]
mov dword [rbp - 0x14], eax
mov eax, dword [r12 + 8]
mov dword [rbp - 0x10], eax
mov eax, dword [r12 + 0xc]
mov dword [rbp - 0xc], eax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r15
mov edx, 4
lea rcx, [rbp + 0x108]
call fcn.140073f90
mov r8d, 0x10
lea rdx, [rbp - 0x18]
mov rdi, qword [rbp + 0x108]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea eax, [r14 + 0x3c]
mov dword [rsp + 0x34], eax
lea r13d, [rax - 6]
movsx eax, si
imul eax, eax, 0x2e
add eax, ebx
mov dword [rsp + 0x30], eax
lea r15d, [rax + 0xac]
mov rdx, qword [0x140082008]
mov rax, qword [0x140082010]
cmp edx, eax
jl 0x140013566
cmp edx, dword [0x140082018]
jg 0x140013566
mov rcx, qword [0x14008200c]
mov r8, qword [0x140082014]
cmp ecx, r8d
jl 0x140013566
cmp ecx, dword [0x14008201c]
jg 0x140013566
sub edx, eax
cmp edx, r15d
jl 0x140013566
lea eax, [r15 + 0x29]
cmp edx, eax
jg 0x140013566
sub ecx, r8d
cmp ecx, r13d
jl 0x140013566
lea eax, [r13 + 0x14]
cmp ecx, eax
jg 0x140013566
mov r14d, 1
jmp 0x140013569
xor r14d, r14d
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x140081fe8]
jne 0x140013686
test r14d, r14d
je 0x140013686
cmp dword [0x140082028], 0
jne 0x140013686
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1400135c9
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 4
call qword [sym.imp.USER32.dll_mouse_event]
movsx rax, si
inc dword [rdi + rax*4]
jmp 0x1400135fe
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1400135fe
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x10
call qword [sym.imp.USER32.dll_mouse_event]
movsx rax, si
dec dword [rdi + rax*4]
mov ecx, 0x25
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140013614
mov cl, 0x25
jmp 0x140013628
mov ecx, 0x26
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140013643
mov cl, 0x26
xor r9d, r9d
mov r8d, 2
xor edx, edx
call qword [sym.imp.USER32.dll_keybd_event]
movsx rax, si
add dword [rdi + rax*4], 5
jmp 0x140013686
mov ecx, 0x27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140013659
mov cl, 0x27
jmp 0x14001366d
mov ecx, 0x28
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140013686
mov cl, 0x28
xor r9d, r9d
mov r8d, 2
xor edx, edx
call qword [sym.imp.USER32.dll_keybd_event]
movsx rax, si
add dword [rdi + rax*4], 0xfffffffb
movsx rax, si
mov ecx, dword [rdi + rax*4]
cmp ecx, 0xff
jl 0x14001369e
mov dword [rdi + rax*4], 0xff
jmp 0x1400136a9
test ecx, ecx
jg 0x1400136a9
mov dword [rdi + rax*4], 0
mov r8d, dword [rdi + 4]
mov edx, dword [rdi + 8]
mov ecx, dword [rdi + 0xc]
mov eax, dword [rdi]
mov dword [r12], eax
mov dword [r12 + 4], r8d
mov dword [r12 + 8], edx
mov dword [r12 + 0xc], ecx
xor eax, eax
mov qword [rbp + 0x30], rax
mov word [rbp + 0xde], ax
mov word [rbp + 0xee], ax
mov dword [rbp + 0xf8], eax
mov dword [rbp + 0xfc], 1
shr rax, 0x20
movzx edx, al
shl edx, 8
mov dword [rbp + 0xd0], r15d
mov dword [rbp + 0xd4], r13d
lea eax, [r15 + 0x29]
mov dword [rbp + 0xe0], eax
lea eax, [r13 + 0x14]
mov dword [rsp + 0x60], eax
mov dword [rbp + 0xe4], eax
movzx ecx, dl
shl cx, 8
mov word [rbp + 0xd8], cx
mov word [rbp + 0xda], dx
mov eax, edx
shr eax, 0x10
shl ax, 8
mov word [rbp + 0xdc], ax
mov word [rbp + 0xe8], cx
mov word [rbp + 0xea], dx
mov word [rbp + 0xec], ax
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea r9, [rbp + 0xf8]
mov r8d, 2
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x140082000]
call qword [sym.imp.MSIMG32.dll_GradientFill]
mov r13d, dword [rsp + 0x34]
lea r11d, [r13 - 5]
mov r10d, dword [rsp + 0x30]
add r10d, 0xad
xor r15d, r15d
mov word [rbp + 0xde], r15w
mov word [rbp + 0xee], r15w
test r14d, r14d
je 0x14001389c
mov dword [rbp + 0x70], 0x1e
mov dword [rbp + 0x74], 0x1e
mov eax, dword [0x140081fd4]
cdq
and edx, 3
lea r8d, [rdx + rax]
sar r8d, 2
mov dword [rbp + 0x50], r8d
mov eax, dword [0x140081fd8]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rbp + 0x54], eax
mov dword [rbp + 0x100], r15d
mov dword [rbp + 0x104], 1
mov eax, dword [0x140081fdc]
cdq
and edx, 3
add eax, edx
sar eax, 2
movzx r9d, al
mov rax, qword [rbp + 0x50]
shr rax, 0x20
movzx ecx, al
shl ecx, 8
mov eax, r9d
shl eax, 0x10
or ecx, eax
movzx eax, r8b
or ecx, eax
mov rax, qword [rbp + 0x70]
shr rax, 0x20
movzx edx, al
shl edx, 8
or edx, 0x1e001e
lea eax, [r10 + 0x27]
mov dword [rbp + 0xe0], eax
lea eax, [r11 + 0x12]
mov dword [rbp + 0xe4], eax
movzx eax, cl
shl ax, 8
mov word [rbp + 0xd8], ax
mov r14d, 0xff00
and cx, r14w
shl r9w, 8
mov word [rbp + 0xdc], r9w
movzx eax, dl
shl ax, 8
mov word [rbp + 0xe8], ax
movzx eax, dx
and ax, r14w
lea r9, [rbp + 0x100]
jmp 0x140013990
mov dword [rsp + 0x40], 0x1e
mov dword [rsp + 0x44], 0x1e
mov eax, 0x66666667
imul dword [0x140081fd4]
mov r9d, edx
sar r9d, 1
mov eax, r9d
shr eax, 0x1f
add r9d, eax
mov dword [rbp + 8], r9d
mov eax, 0x66666667
imul dword [0x140081fd8]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rbp + 0xc], edx
mov dword [rbp + 0xf0], r15d
mov dword [rbp + 0xf4], 1
mov eax, 0x66666667
imul dword [0x140081fdc]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx r8d, dl
mov rax, qword [rbp + 8]
shr rax, 0x20
movzx ecx, al
shl ecx, 8
mov eax, r8d
shl eax, 0x10
or ecx, eax
movzx eax, r9b
or ecx, eax
mov rax, qword [rsp + 0x40]
shr rax, 0x20
movzx edx, al
shl edx, 8
or edx, 0x1e001e
lea eax, [r10 + 0x27]
mov dword [rbp + 0xe0], eax
lea eax, [r11 + 0x12]
mov dword [rbp + 0xe4], eax
movzx eax, cl
shl ax, 8
mov word [rbp + 0xd8], ax
mov r9d, 0xff00
and cx, r9w
shl r8w, 8
mov word [rbp + 0xdc], r8w
movzx eax, dl
shl ax, 8
mov word [rbp + 0xe8], ax
movzx eax, dx
and ax, r9w
lea r9, [rbp + 0xf0]
shr edx, 0x10
shl dx, 8
mov dword [rsp + 0x28], 1
mov word [rbp + 0xec], dx
mov word [rbp + 0xda], cx
mov dword [rsp + 0x20], 1
mov dword [rbp + 0xd0], r10d
mov dword [rbp + 0xd4], r11d
mov word [rbp + 0xea], ax
mov r8d, 2
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x140082000]
call qword [sym.imp.MSIMG32.dll_GradientFill]
test rdi, rdi
je 0x140013a20
mov rdx, qword [rbp + 0x118]
sub rdx, rdi
and rdx, 0xfffffffffffffffc
mov rax, rdi
cmp rdx, 0x1000
jb 0x140013a18
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013a35
mov rcx, rdi
call fcn.1400748b0
inc si
cmp si, 3
jg 0x140013a3c
mov r14d, dword [rbp + 0x184]
jmp 0x140013490
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movdqa xmm0, xmmword [0x14007a750]
movdqa xmmword [rsp + 0x40], xmm0
mov edx, dword [r12]
lea rcx, [rsp + 0x68]
call fcn.140039f80
mov r8, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
sub rax, r8
mov edi, 3
lea r15, [0x1400780ac]
cmp rax, rdi
jb 0x140013af6
lea rax, [r8 + 3]
mov qword [rsp + 0x78], rax
lea rsi, [rsp + 0x68]
cmp rcx, 0xf
cmova rsi, qword [rsp + 0x68]
lea rax, [0x1400780af]
cmp rax, rsi
jbe 0x140013ab9
lea rax, [rsi + r8]
cmp r15, rax
ja 0x140013ab9
cmp rsi, r15
ja 0x140013ab1
xor eax, eax
mov r14d, eax
jmp 0x140013abc
mov r14, rsi
sub r14, r15
jmp 0x140013abc
mov r14, rdi
inc r8
lea rcx, [rsi + 3]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rdx, [r15 + 3]
add rdx, r14
lea rcx, [rsi + r14]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x68]
jmp 0x140013b0d
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
mov rdx, rdi
lea rcx, [rsp + 0x68]
call fcn.140074620
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
xor r14d, r14d
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
add r13d, 0xfffffffe
mov dword [rsp + 0x30], r13d
lea edx, [rbx + 0xb1]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd0]
mov r8d, r13d
call fcn.14000d780
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x140013bb0
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013bab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013bab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400748b0
movdqa xmm0, xmmword [0x14007a750]
movdqa xmmword [rsp + 0x40], xmm0
mov edx, dword [r12 + 4]
lea rcx, [rbp - 0x78]
call fcn.140039f80
mov r8, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
sub rax, r8
lea r15, [0x1400780b0]
cmp rax, 3
jb 0x140013c5d
lea rax, [r8 + 3]
mov qword [rbp - 0x68], rax
lea rsi, [rbp - 0x78]
cmp rcx, 0xf
cmova rsi, qword [rbp - 0x78]
lea rax, [0x1400780b3]
cmp rax, rsi
jbe 0x140013c1e
lea rax, [rsi + r8]
cmp r15, rax
ja 0x140013c1e
cmp rsi, r15
jbe 0x140013c21
mov r14, rsi
sub r14, r15
jmp 0x140013c21
mov r14, rdi
inc r8
lea rcx, [rsi + 3]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rdx, [r15 + 3]
add rdx, r14
lea rcx, [rsi + r14]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x78]
xor r14d, r14d
jmp 0x140013c73
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.140074620
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea edx, [rbx + 0xdf]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd0]
mov r8d, r13d
call fcn.14000d780
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x140013d09
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013d04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013d04
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400748b0
movdqa xmm0, xmmword [0x14007a750]
movdqa xmmword [rsp + 0x40], xmm0
mov edx, dword [r12 + 8]
lea rcx, [rbp - 0x58]
call fcn.140039f80
mov r8, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
sub rax, r8
lea r15, [0x1400780b4]
cmp rax, 3
jb 0x140013db6
lea rax, [r8 + 3]
mov qword [rbp - 0x48], rax
lea rsi, [rbp - 0x58]
cmp rcx, 0xf
cmova rsi, qword [rbp - 0x58]
lea rax, [0x1400780b7]
cmp rax, rsi
jbe 0x140013d77
lea rax, [rsi + r8]
cmp r15, rax
ja 0x140013d77
cmp rsi, r15
jbe 0x140013d7a
mov r14, rsi
sub r14, r15
jmp 0x140013d7a
mov r14, rdi
inc r8
lea rcx, [rsi + 3]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8, rdi
sub r8, r14
lea rdx, [r15 + 3]
add rdx, r14
lea rcx, [rsi + r14]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x58]
xor r14d, r14d
jmp 0x140013dcc
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
mov rdx, rdi
lea rcx, [rbp - 0x58]
call fcn.140074620
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea edx, [rbx + 0x10d]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd0]
mov r8d, r13d
call fcn.14000d780
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140013e62
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013e5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013e5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400748b0
movdqa xmm0, xmmword [0x14007a750]
movdqa xmmword [rsp + 0x40], xmm0
mov edx, dword [r12 + 0xc]
lea rcx, [rbp - 0x38]
call fcn.140039f80
mov r8, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
sub rax, r8
lea r15, [0x1400780b8]
cmp rax, 3
jb 0x140013f11
lea rax, [r8 + 3]
mov qword [rbp - 0x28], rax
lea rsi, [rbp - 0x38]
cmp rcx, 0xf
cmova rsi, qword [rbp - 0x38]
lea r13, [0x1400780bb]
cmp r13, rsi
jbe 0x140013ed0
lea rax, [r8 + rsi]
cmp r15, rax
ja 0x140013ed0
cmp rsi, r15
jbe 0x140013ed3
mov r14, rsi
sub r14, r15
jmp 0x140013ed3
mov r14, rdi
inc r8
lea rcx, [rsi + 3]
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
sub rdi, r14
lea rdx, [r14 + r13]
lea rcx, [rsi + r14]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x38]
mov r13d, dword [rsp + 0x30]
xor r14d, r14d
jmp 0x140013f27
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
mov rdx, rdi
lea rcx, [rbp - 0x38]
call fcn.140074620
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea edx, [rbx + 0x13b]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd0]
mov r8d, r13d
call fcn.14000d780
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x140013fbd
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013fb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140013fb8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400748b0
mov qword [rsp + 0x40], 0
lea ecx, [rbx + 0x168]
mov dword [rbp + 0xdc], 0
mov dword [rbp + 0xec], 0
mov dword [rbp + 0xf0], r14d
mov dword [rbp + 0xf4], 1
mov rax, qword [rsp + 0x40]
shr rax, 0x20
movzx edx, al
shl edx, 8
mov dword [rbp + 0xd0], ecx
mov edi, dword [rsp + 0x34]
lea eax, [rdi - 6]
mov dword [rbp + 0xd4], eax
lea eax, [rcx + 0x14]
mov dword [rbp + 0xe0], eax
mov eax, dword [rsp + 0x60]
mov dword [rbp + 0xe4], eax
movzx eax, dl
shl ax, 8
mov word [rbp + 0xd8], ax
mov word [rbp + 0xda], dx
mov word [rbp + 0xe8], ax
mov word [rbp + 0xea], dx
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea r9, [rbp + 0xf0]
mov r8d, 2
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x140082000]
call qword [sym.imp.MSIMG32.dll_GradientFill]
mov eax, dword [r12]
cdq
and edx, 3
lea r8d, [rdx + rax]
sar r8d, 2
mov dword [rsp + 0x40], r8d
mov eax, dword [r12 + 4]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rsp + 0x44], eax
add ebx, 0x169
mov word [rbp + 0xde], r14w
mov word [rbp + 0xee], r14w
mov dword [rbp + 0xf0], r14d
mov dword [rbp + 0xf4], 1
mov rdx, qword [r12]
mov rax, rdx
shr rax, 0x20
movzx r9d, al
shl r9d, 8
mov eax, dword [r12 + 8]
movzx ecx, al
shl ecx, 0x10
or r9d, ecx
movzx eax, dl
or r9d, eax
mov eax, dword [r12 + 8]
cdq
and edx, 3
add eax, edx
sar eax, 2
movzx edx, al
mov rax, qword [rsp + 0x40]
shr rax, 0x20
movzx ecx, al
shl ecx, 8
mov eax, edx
shl eax, 0x10
or ecx, eax
movzx eax, r8b
or ecx, eax
mov dword [rbp + 0xd0], ebx
lea r8d, [rdi - 5]
mov dword [rbp + 0xd4], r8d
lea eax, [rbx + 0x12]
mov dword [rbp + 0xe0], eax
lea eax, [r8 + 0x12]
mov dword [rbp + 0xe4], eax
movzx eax, r9b
shl ax, 8
mov word [rbp + 0xd8], ax
movzx eax, r9w
mov r8d, 0xff00
and ax, r8w
mov word [rbp + 0xda], ax
shr r9d, 0x10
shl r9w, 8
mov word [rbp + 0xdc], r9w
movzx eax, cl
shl ax, 8
mov word [rbp + 0xe8], ax
and cx, r8w
mov word [rbp + 0xea], cx
shl dx, 8
mov word [rbp + 0xec], dx
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea r9, [rbp + 0xf0]
mov r8d, 2
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x140082000]
call qword [sym.imp.MSIMG32.dll_GradientFill]
movups xmm0, xmmword [r12]
mov rax, qword [rbp + 0x28]
movups xmmword [rax], xmm0
mov rcx, qword [rbp + 0x128]
xor rcx, rsp
call fcn.140074890
mov rbx, qword [rsp + 0x270]
add rsp, 0x230
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret