Function at 0x14001eb00
Capabilities:
Get keyboard layout

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rsi
push rdi
push r13
push r14
push r15
sub rsp, 0x70
movzx r8d, word [0x1401033f8]
xor r15d, r15d
or rsi, 0xffffffffffffffff
mov dword [rax + 0x10], 0x90020
mov word [rax + 0x14], r8w
mov r14, rdx
mov word [rax + 0x16], r15w
mov r13, rcx
mov r9d, SafeArrayAllocDescriptor
mov rdi, rdx
test rdx, rdx
je 0x14001eb83
movzx edx, word [rdx]
test dx, dx
je 0x14001eb83
nop
lea rcx, [rsp + 0xa8]
mov eax, r9d
nop dword [rax + rax]
cmp dx, ax
je 0x14001ec09
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x14001eb60
movzx edx, word [rdi + 2]
add rdi, 2
test dx, dx
jne 0x14001eb50
mov rax, rsi
nop word [rax + rax]
cmp word [r14 + rax*2 + 2], r15w
lea rax, [rax + 1]
jne 0x14001eb90
lea rdi, [r14 + rax*2]
mov rbx, r15
sub rdi, r14
lea rdx, [0x1400e6570]
sar rdi, 1
mov r9, rsi
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
je 0x14001ebff
mov r9, rsi
lea rdx, [0x1400e6588]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
je 0x14001ebff
mov r9, rsi
lea rdx, [0x1400e65a8]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001ec5c
mov edx, 1
mov dword [0x140106b28], edx
mov eax, 3
jmp 0x14001efcc
mov rbx, rdi
nop dword [rax]
movzx eax, word [rbx]
cmp ax, r9w
je 0x14001ec1f
cmp ax, 9
jne 0x14001ec25
add rbx, 2
jmp 0x14001ec10
movzx eax, word [rbx]
test ax, ax
je 0x14001eba0
cmp ax, r8w
jne 0x14001eba3
movzx eax, word [rbx + 2]
add rbx, 2
cmp ax, r9w
je 0x14001ec3b
cmp ax, 9
je 0x14001ec3b
cmp ax, r15w
cmove rbx, r15
jmp 0x14001eba3
mov r9, rsi
lea rdx, [0x1400e65b8]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001ec86
mov byte [0x140106b2d], 1
mov eax, 3
jmp 0x14001efcc
mov r9, rsi
lea rdx, [0x1400e65d0]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001ecb0
mov byte [0x140105d81], 1
mov eax, 3
jmp 0x14001efcc
mov r9, rsi
lea rdx, [0x1400e65e8]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001ed59
mov edx, 1
mov dword [0x140105d84], edx
test rbx, rbx
je 0x14001ed4f
lea rdx, [0x1400e6608]
mov rcx, rbx
call fcn.1400ab3f0
test eax, eax
jne 0x14001ed03
mov ebx, 2
mov dword [0x140105d84], ebx
lea eax, [rbx + 1]
jmp 0x14001efcc
lea rdx, [0x1400e6618]
mov rcx, rbx
call fcn.1400ab3f0
test eax, eax
jne 0x14001ed2a
mov dword [0x140105d84], 3
mov eax, 3
jmp 0x14001efcc
lea rdx, [0x1400e3530]
mov rcx, rbx
call fcn.1400ab3f0
mov ecx, dword [0x140105d84]
test eax, eax
mov edx, 4
cmove ecx, edx
mov dword [0x140105d84], ecx
mov eax, 3
jmp 0x14001efcc
mov r9, rsi
lea rdx, [0x1400e6628]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001ed83
or byte [0x140106d02], 1
mov eax, 3
jmp 0x14001efcc
mov r9, rsi
lea rdx, [0x1400e6650]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001edad
or byte [0x140106d02], 2
mov eax, 3
jmp 0x14001efcc
mov r9, rsi
lea rdx, [0x1400e6678]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001edf2
test rbx, rbx
je 0x14001ede1
xor edx, edx
mov rcx, rbx
call fcn.14000aec0
mov byte [0x140105de9], r15b
cmp eax, 2
je 0x14001ede8
mov byte [0x140105de9], 1
mov eax, 3
jmp 0x14001efcc
mov r9, rsi
lea rdx, [0x1400d19a0]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001eed7
test rbx, rbx
jne 0x14001ee23
mov qword [0x140106b20], r15
lea eax, [rbx + 3]
jmp 0x14001efcc
mov rcx, rbx
call fcn.14000b630
mov qword [0x140106b20], rax
test rax, rax
jne 0x14001ebff
mov rax, qword [0x140101a58]
lea rdi, [0x1400cffcc]
mov qword [rsp + 0x38], r15
xor r9d, r9d
mov qword [rsp + 0x30], r15
mov r8b, 0xe3
mov qword [rsp + 0x28], r15
mov rdx, rbx
mov rsi, qword [rax + 0xd8]
mov rcx, r13
mov qword [rax + 0xd8], r15
mov byte [r13 + 0x7d], 1
mov qword [rsp + 0x20], rdi
call fcn.140020000
test eax, eax
jne 0x14001ee8c
xor eax, eax
jmp 0x14001efcc
mov rax, qword [0x140101a58]
mov byte [r13 + 0x7d], r15b
mov qword [rax + 0xd8], rsi
mov rbx, qword [r13 + 8]
call fcn.14000b580
mov qword [0x140106b20], rax
mov rdx, rax
test rax, rax
je 0x14001ee85
mov byte [rax], 5
mov qword [rax + 0x18], rbx
mov rax, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov eax, 3
mov qword [rdx + 8], rcx
mov qword [rdx + 0x10], rdi
jmp 0x14001efcc
mov r9, rsi
lea rdx, [0x1400e6690]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001ef0d
test rbx, rbx
je 0x14001ef03
mov rcx, rbx
call fcn.140017830
mov dword [0x1401033fc], eax
mov eax, 3
jmp 0x14001efcc
mov qword [rsp + 0xa0], rbp
lea rdx, [0x1400e66a8]
mov r8d, 6
mov qword [rsp + 0xb0], r12
mov rcx, r14
call fcn.1400ad9d8
test eax, eax
jne 0x14001f0fe
lea rcx, [r14 + 0xc]
lea r8d, [rax + 3]
lea rdx, [0x1400e36e0]
call fcn.1400ad9d8
test eax, eax
lea rdx, [0x1400e36e8]
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetUBound
mov edi, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
sete r12b
test r12b, r12b
cmovne edi, ecx
lea r8d, [rcx - 0xc]
add rdi, r14
mov rcx, rdi
call fcn.1400ad9d8
test eax, eax
jne 0x14001ef83
inc r12b
jmp 0x14001efab
mov r8d, 5
lea rdx, [0x1400e3518]
mov rcx, rdi
call fcn.1400ad9d8
test eax, eax
jne 0x14001f9b8
test r12b, r12b
setne r12b
add r12b, 3
test rbx, rbx
jne 0x14001efe1
mov qword [0x140106b20], r15
mov eax, 3
mov rbp, qword [rsp + 0xa0]
mov r12, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xb8]
add rsp, 0x70
pop r15
pop r14
pop r13
pop rdi
pop rsi
ret
movzx edx, word [0x1401033f8]
mov r10, r15
movzx r9d, word [0x1401033f0]
mov rcx, rbx
movzx r8d, word [0x1401033f4]
nop
movzx eax, word [rcx]
test ax, ax
je 0x14001f026
cmp ax, r9w
je 0x14001f055
cmp ax, dx
je 0x14001f055
cmp ax, r8w
je 0x14001f055
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x14001f008
lea rdi, [0x1400cffcc]
test r10, r10
je 0x14001f0c2
lea rsi, [r10 + 2]
nop word [rax + rax]
movzx eax, word [rsi]
cmp ax, 0x20
je 0x14001f04f
cmp ax, 9
jne 0x14001f0a0
add rsi, 2
jmp 0x14001f040
movzx eax, word [rcx]
test ax, ax
je 0x14001f026
cmp ax, r8w
je 0x14001f089
cmp ax, dx
jne 0x14001f076
test r10, r10
jne 0x14001f089
mov r10, rcx
add rcx, 2
jmp 0x14001f000
add rcx, 2
cmp word [rcx], r15w
je 0x14001f026
add rcx, 2
jmp 0x14001f000
mov r8, r14
lea rdx, [0x1400e66c0]
mov rcx, r13
call fcn.140039240
jmp 0x14001efbc
mov word [r10], r15w
mov rcx, rbx
sub r10, rbx
sar r10, 1
mov rdx, r10
call fcn.140017730
mov r8b, 1
mov rcx, rsi
call fcn.14008dd60
jmp 0x14001f0c5
mov rsi, rdi
mov r8b, 1
mov rcx, rbx
call fcn.14008dd60
mov r8, rsi
mov rdx, rbx
movzx ecx, r12b
call fcn.14000b3b0
test eax, eax
jne 0x14001efb7
mov r8, rdi
lea rdx, [0x1400e3900]
mov rcx, r13
call fcn.140039240
jmp 0x14001efbc
mov r9, rsi
lea rdx, [0x1400e6738]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f235
test rbx, rbx
je 0x14001efb7
lea rdx, [0x1400e3cf8]
mov rcx, rbx
call fcn.14008b980
test rax, rax
je 0x14001f182
lea rdx, [0x1400e6750]
mov rcx, rax
call fcn.14000adc0
test rax, rax
je 0x14001efb7
lea rdx, [rax + 2]
mov r8d, 0x64
lea rcx, [0x140103320]
call fcn.1400b44b4
xor r8d, r8d
mov word [0x1401033e8], r15w
lea rcx, [0x140103320]
call fcn.14008dd60
jmp 0x14001efb7
mov r8d, 7
lea rdx, [0x1400e6758]
mov rcx, rbx
call fcn.1400ad9d8
test eax, eax
jne 0x14001f1a7
mov byte [0x14010331c], r15b
jmp 0x14001efb7
lea rax, [0x140105d80]
mov rcx, rbx
mov qword [rsp + 0x60], rax
lea r9, [0x1401033ec]
lea rax, [0x140105deb]
mov qword [rsp + 0x58], rax
lea r8, [0x140105f54]
lea rax, [0x140105f50]
mov qword [rsp + 0x50], rax
lea rdx, [0x140105f58]
lea rax, [0x14010331d]
mov qword [rsp + 0x48], rax
lea rax, [0x140105f53]
mov qword [rsp + 0x40], rax
lea rax, [0x140105f51]
mov qword [rsp + 0x38], rax
lea rax, [0x14010331e]
mov qword [rsp + 0x30], rax
lea rax, [0x14010331f]
mov qword [rsp + 0x28], rax
lea rax, [0x140105f52]
mov qword [rsp + 0x20], rax
call fcn.14000ed30
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e6768]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f26a
test rbx, rbx
je 0x14001efb7
mov rcx, rbx
call fcn.140010b50
mov dword [0x140103410], eax
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e6798]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f2a9
test rbx, rbx
je 0x14001efb7
mov rcx, rbx
call fcn.140010b50
mov ecx, 0xa
cmp eax, ecx
cmovl eax, ecx
mov dword [0x140103400], eax
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e67b8]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f2e8
test rbx, rbx
je 0x14001efb7
mov rcx, rbx
call fcn.140010b50
mov edx, 1
cmp eax, edx
cmovl eax, edx
mov dword [0x140103404], eax
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e67e8]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f332
test rbx, rbx
je 0x14001efb7
mov rcx, rbx
call fcn.140010b50
mov ecx, 0xff
cmp eax, ecx
jg 0x14001f327
mov edx, 1
mov ecx, eax
cmp eax, edx
cmovl ecx, edx
mov byte [0x1401033ea], cl
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e6818]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f376
test rbx, rbx
je 0x14001f36a
xor edx, edx
mov rcx, rbx
call fcn.14000aec0
mov byte [0x140106afc], r15b
cmp eax, 2
je 0x14001efb7
mov byte [0x140106afc], 1
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e6840]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f3c0
test rbx, rbx
je 0x14001efb7
mov rcx, rbx
call fcn.140010b50
mov ecx, 0xff
cmp eax, ecx
jg 0x14001f3b5
mov edx, 1
mov ecx, eax
cmp eax, edx
cmovl ecx, edx
mov dword [0x140101a54], ecx
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e6858]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f3f5
test rbx, rbx
je 0x14001efb7
mov rcx, rbx
call fcn.140010b50
mov dword [0x140101a64], eax
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e6880]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f439
test rbx, rbx
je 0x14001f42d
xor edx, edx
mov rcx, rbx
call fcn.14000aec0
mov byte [0x140105dea], r15b
cmp eax, 2
je 0x14001efb7
mov byte [0x140105dea], 1
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e6890]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f45e
mov byte [0x140106b2f], 1
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e68b8]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f484
mov byte [r13 + 0xbb3], 1
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e68d8]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f513
test rbx, rbx
je 0x14001efb7
mov rcx, rbx
call fcn.140017860
movsd xmm1, qword [0x1400eeaa0]
comisd xmm0, xmm1
ja 0x14001f4c8
movsd xmm1, qword [0x1400eea48]
maxsd xmm1, xmm0
mulsd xmm1, qword [0x1400eea90]
xor ecx, ecx
movsd xmm0, qword [0x1400eeaf8]
mulsd xmm1, qword [0x1400eea90]
comisd xmm1, xmm0
jb 0x14001f4ff
subsd xmm1, xmm0
comisd xmm1, xmm0
jae 0x14001f4ff
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rax, xmm1
add rax, rcx
mov qword [0x140103408], rax
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e68e8]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f562
test rbx, rbx
je 0x14001efb7
mov rcx, rbx
call fcn.140010b50
test eax, eax
jns 0x14001f54d
mov dword [0x140101a60], r15d
jmp 0x14001efb7
mov ecx, 0x1f4
cmp eax, ecx
cmovg eax, ecx
mov dword [0x140101a60], eax
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e5ec0]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f626
test rbx, rbx
je 0x14001efb7
cmp word [rbx + 2], r15w
jne 0x14001f5ea
movzx ecx, word [rbx]
cmp cx, 0x23
je 0x14001f8ea
cmp cx, word [0x1401033f4]
je 0x14001f8ea
cmp cx, word [0x1401033f0]
je 0x14001f8ea
cmp cx, word [0x1401033f8]
je 0x14001f8ea
lea eax, [rcx - 0x21]
cmp ax, 0x3d
ja 0x14001f5e0
movabs rdx, 0x2000000028000609
bt rdx, rax
jb 0x14001f8ea
cmp cx, 0x7e
je 0x14001f8ea
mov rdx, rbx
mov r8d, reloc.OLEAUT32.dll_SafeArrayDestroy
lea rbx, [0x140103e48]
mov rcx, rbx
call fcn.1400b44b4
mov word [0x140103e66], r15w
nop word [rax + rax]
inc rsi
cmp word [rbx + rsi*2], r15w
jne 0x14001f610
mov qword [0x140103e40], rsi
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e6900]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f69c
test rbx, rbx
je 0x14001efb7
movzx eax, word [rbx]
cmp ax, 0x23
je 0x14001f8ea
cmp ax, word [0x1401033f4]
je 0x14001f8ea
cmp ax, word [0x1401033f8]
je 0x14001f8ea
cmp ax, 0x2e
je 0x14001f8ea
cmp qword [0x140103e40], 1
jne 0x14001f690
cmp ax, word [0x140103e48]
je 0x14001f8ea
mov word [0x1401033f0], ax
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e6918]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f708
test rbx, rbx
je 0x14001efb7
movzx eax, word [rbx]
cmp ax, word [0x1401033f0]
je 0x14001f8ea
cmp ax, word [0x1401033f8]
je 0x14001f8ea
cmp ax, 0x2e
je 0x14001f8ea
cmp qword [0x140103e40], 1
jne 0x14001f6fc
cmp ax, word [0x140103e48]
je 0x14001f8ea
mov word [0x1401033f4], ax
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e6930]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f77e
test rbx, rbx
je 0x14001efb7
movzx eax, word [rbx]
cmp ax, 0x23
je 0x14001f8ea
cmp ax, word [0x1401033f0]
je 0x14001f8ea
cmp ax, word [0x1401033f4]
je 0x14001f8ea
cmp ax, 0x2e
je 0x14001f8ea
cmp qword [0x140103e40], 1
jne 0x14001f772
cmp ax, word [0x140103e48]
je 0x14001f8ea
mov word [0x1401033f8], ax
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e6948]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f7ef
test rbx, rbx
je 0x14001f7ca
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
xor r9d, r9d
lea r8, [0x140103414]
lea rdx, [0x1401033eb]
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.140016770
test al, al
jne 0x14001efb7
test rbx, rbx
lea rax, [0x1400e3d38]
lea rdx, [0x1400e6968]
mov r8, r14
cmovne rdx, rax
mov rcx, r13
call fcn.140039240
jmp 0x14001efbc
mov r9, rsi
lea rdx, [0x1400e6998]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f82d
test rbx, rbx
je 0x14001f821
mov rcx, rbx
call fcn.140010b50
mov r15d, eax
cmp eax, 0x64
ja 0x14001f8ea
mov byte [0x14010602b], r15b
jmp 0x14001efb7
mov r9, rsi
lea rdx, [0x1400e69b0]
mov r8, rdi
mov rcx, r14
call fcn.14008b630
test eax, eax
jne 0x14001f9b8
movzx edx, word [0x1401033f8]
lea rdi, [0x1400cffcc]
test rbx, rbx
mov rsi, rdi
cmovne rsi, rbx
mov rcx, rsi
call fcn.1400a9968
test rax, rax
je 0x14001f8ae
lea rdi, [rax + 2]
movzx ecx, word [rdi]
cmp cx, 0x20
je 0x14001f882
cmp cx, 9
jne 0x14001f888
add rdi, 2
jmp 0x14001f873
add rax, 0xfffffffffffffffe
cmp rax, rsi
jbe 0x14001f8a9
movzx ecx, word [rax]
cmp cx, 0x20
je 0x14001f8a0
cmp cx, 9
jne 0x14001f8a9
sub rax, 2
cmp rax, rsi
ja 0x14001f891
mov word [rax + 2], r15w
mov ebp, 5
cmp word [rsi], r15w
je 0x14001f901
mov ebp, r15d
lea rbx, [0x1400e4508]
lea r12, [0x1400e4538]
nop word [rax + rax]
mov rdx, qword [rbx]
mov rcx, rsi
call fcn.1400ab3f0
test eax, eax
je 0x14001f901
inc ebp
add rbx, 8
cmp rbx, r12
jne 0x14001f8d0
mov r8, r14
lea rdx, [0x1400e3d38]
mov rcx, r13
call fcn.140039240
jmp 0x14001efbc
mov ebx, 2
cmp word [rdi], r15w
je 0x14001f951
mov ebx, r15d
lea rsi, [0x1400e44e8]
lea r14, [0x1400e4508]
nop dword [rax]
mov rdx, qword [rsi]
mov rcx, rdi
call fcn.1400ab3f0
test eax, eax
je 0x14001f951
inc ebx
add rsi, 8
cmp rsi, r14
jne 0x14001f920
mov r8, rdi
lea rdx, [0x1400e3d68]
mov rcx, r13
call fcn.140039240
jmp 0x14001efbc
test ebp, ebp
je 0x14001f95a
cmp ebp, 5
jne 0x14001f960
mov dword [0x140106b40], ebx
lea eax, [rbp - 1]
test eax, 0xfffffffb
mov eax, dword [0x140106b3c]
cmove eax, ebx
mov dword [0x140106b3c], eax
lea eax, [rbp - 3]
test eax, 0xfffffffd
mov eax, dword [0x140106b38]
cmove eax, ebx
mov dword [0x140106b38], eax
cmp ebp, 2
je 0x14001f998
cmp ebp, 5
jne 0x14001f99e
mov dword [0x140106b34], ebx
mov ecx, dword [0x140106b30]
lea eax, [rbp - 4]
cmp eax, 1
cmovbe ecx, ebx
mov dword [0x140106b30], ecx
jmp 0x14001efb7
mov eax, 4
jmp 0x14001efbc